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From the Editor 



s announced last iiionth - in MacTech Magazine and elsewhere - Mac’^Fech is hosting a conference, 
A tech conference, of course, bin it's also more, Hopefullyj you've been following along ai 
http://www.mactechxom/conference and ©mactechconf on Twitter. As this issue is going lo the 
printer, we're just about to oj>en registnition. We're incredibly excited by the ideas that people have been 
bringing fonh and by the schedule that's in place. Even better are the informal discussions and meetings 
wailing to take place. WeVe kK)king forward to seeing you in November. 

Speaking of excitement, this month brings some changes that are exciting for everyone. Eirst bit of 
news is about coloninist Dave Drihin. Dave created and has written I'he Road to Code column in Maclecb 
for three years. He has taken readers from how to get started in Mac development rhrougli many more 
advanced topics. Go l>ack and take a look at the first colunrin online (hftp://macte.ch/mfrtc01) and see 
just how much ground Ihe Road to Code has covered. Well, Dave is moving on and we want to 
congratulate him. Thanks for a great rliree years, Dave, your work here will be misused. Dave leaves us watli 
a review of this year's NSConferente. 

Also exciting are the possibilities of how^ MacTeeb will continue to present developer-related content. 
The first entry' is in this veiy is.sue: Boisy G. Pitre brings us an article on waiting daemons in Mac OS X. 

Mike Hjorleifsson brings another installment of CaireSec, "Understanding H02.1x " Need to ensure lliat 
only authorized machines access a given network? Need audit trails for macliines that access a network? 
The 802. lx standard is the answer, 

Exciting? Adobe has released AAMEE, a utility^ designed to aid in mass installs of Adobe software. 
Exciting? AAMHE is ]>ossihly not tiie panacea that Adoix? may think it is. Greg Neagle lirings his usual 
ex|>erience and pragmatism to a reviewv of AAMEE to help you decide if it's a useful tool for you. 

rhis month's Mac in the Sliell tackles math in the shell. Performing math and array operations in bash 
aren't always the most siraighl-lbrward of pnKtxlurcs. This monifis column clears up both aspecLs of bash. 

Did you ever get curious alxiuL Apj^le’s clu>ice of 0[)jective-C as a language for Mac and lOS 
development? Michael Swaine shares some facts (and non-facts) alxiut Objective-C, just so you have the 
background when talking with other developers. 

Mihalis Tsookalos is back witli an articie that shows you the iechnk|uc tjf adding ct>py and paste 
ability to a Dashboard widget. If there’s anything - particularly a text field - on a whdget, [People will expect 
to be able to copy from, or paste to that element. Make sure you know how to implement this. 

Out cover story' delves into mind mapping. If you're looking for a new way to explore and 
conimuoicate ideas, mind mapping may Ix^ ju.st the tcxil you need. Appk coasiiltant Shelley Watson shares 
her experiences u.sing this technkjue and shares examples of w^ays it can help you. 

Thi.s month, the MacTech Spotlighl finds Jacob Goiban^ developer ai Apparent Software, Personally, 
fill fascinated with anything that lets me use the mouse less in any way possible, Ifs in this w'ay I fotmd 
Bla.st, and hy extension Jacob, Check out what makes him tick in this momtb's Macdech Si>oriight, 

Exciting things are all around at Maclecb. We hope you join us at MacTech Cxmfereme 2010 in 
November. Until then, iliough, see ytju next nionlli riglii here. 

Ed Marcz;ik, 

Executive Editoi' 
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Objective-C 

As ihe Li-niLT of ilic .software t(eve!{)pment universe shifts 
from computers to mobile devices, many problems and 
challenges thought to ht* solved are with us again. As this 
new/oid thing called iOS l>econies tfic center of Apple's 
software universe, the problem list includes Objective'C, It's the 
preferred language of iOb app develtjpmenr, inheritetl from 
NHXTSTKP along with the NeXl’ tiperaiing system that iKxame 
Mac OS X and the exile who l^ecanie the CEO, now^ woven 
throughout the fabhc of Apples i-space like s^Jtne fungal 
mycelium. Since most of the apps you use will soon be 
Objedive-Cd)asc‘d, I thought Id share with you a few little- 
known facts alxjut tlie preferred 
language of iPhone 
development. 

Ditl y<m know, lor example, 
that its inventor diiesn’t use it 
any more? Brad Cox lias moved 
on to XMU java. Ruby, Python, 
a ltd Pe rl (http: //y i rtuo I - 

school, edu/cox/). 

Did you kncjw ilutt Java was 
modeled after Qbjective-C? One 
ol the crealrrrs of java says so {http://web,archive.org/ 
web/20071030010852/h ftp://www.es. umd.edu/users/seonl/ 
stuff/jovQ’objc. html). 

Did you know' that the CtK'oa framework of 2002 w^as 
nearly identical to the NEX^fSTHP APIs of 1992? 
(http://wwwjinuxjoyrnal,com/arttcle/6009) Let's call that 
Cl insistency, becau.se it sounds so much nicer than stagnation. 

Memes 

But what really matters are the memes and jokes. One of 
the classic memes is, "If Xs were Ys, whal kind of y would x 
lx-?" Like, If programming languages w'ere beers, what kind of 
Ixrer would lie language Y be?" OK, so if programming 
languages were lieers. wdiai beer w'otdd Ol>ieet[ve-C l>e? The 


Iniemet provides an answer (http://!ainbda-the- 

ultimate.orTg/ncxle/3133), us it does is to every question so 
long as you don’t care alxiut the quality of the an-sw^er. If 
Ohjective-C were a Ix'cr, it would lx* Pabsl Blue Ribbon. I have 
no idea W'hy, 

There is an Objective-C version of the Sliooting Yoitrself in 
the I'oot joke (http://burks.bton.ac,uk/burks/language/ 

shcsot.hfm). You know: "In C, you sIhk)! yourself in die foot, In 
Concurmnt Huchd, you shtKH yourself in somelxxly else's fcx)t. 
In Pascal, die compilej' won t let you shoot yourself in the fcxit. 
In Java, you shoot yourself in the ftKii anti eveiy^one else %vho 

accesses )^c>ur w^ebsite leaves 
hobbling and cursing. In Porth, 
you yourself fcxii in shcxji...." 
Tile Objetaive-C version? "In 
Ofijective C, you write a 
protocol for shcxiting ytxirself in 
the fcKJi so iliai all people am 
get shot in tiieir feet ” You see 
the influenee on java^ right? 

Jozef Dnmsfield has jKJSted 
an Objective C Joke of the Day. 
Apparently just one. Here it is: ‘ Why do they need a garbage 
collector in Yorkshire? Because they keep calling ‘iniiT I can 
see w'hy the tradition only la.sted one day, 

Tliere are Objective C versions of the "^...is the new.,," 
meiiie (hftp://en.wikipedia.org/wlk*/The_new_black). You 
know, "Pink is the new blac k," "Random is the new^ order 
(Apfile)," "Black is the new President (Tracy Morgan)" 
Technically, this is a snow'clone (http://en.wiki- 
pedia.org/wiki/Snowclone). A search on "OI>jec!rvC"C is the 
new.." ylekls: 

Objective-C is the new Java 
Objective-C is the new Ruf>y on Rails 
Objective-C is the new' HTML 


Since most of the apps you used will bo 
Objective-C based. I thought I’d share 
a few little-known facts.„ 
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I dutifully report the^e results, but 1 don't think any of 
these petjple know wirai ""is the new^" means. 

But 1 keed. Objective-C is actually a pretty cool languaj^e, 
if a little old, inspired by an even ccx)ler (atid older) language, 
Smallialk, Anyway, becairse you always want to leave ’em with 
something to huin on the way liome, there an official 
Objective-C countiy song ("Retain My lleait/Or you might 
point to an invalid memory reference...'^), inspired by the 
inimitable Erica Sadun. FolUw the link 
(http:// www.tuaw.com/20 1 0/05/2 1 / rocking-the-ob- 
jecfive-c-ountry/) to the audio and sing along. 

All together now. 

\\\\ 



About The Author 
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Mac in the Shell 

by Edward Marczak 


Math in the Shell 

Down to some lesser-used 
aspects of bash 

V___ J 


errrBsg[15]“"*t}ff by one error** 
erriiisg[10l="0ut of bounds error** 
erTinsg[22]=“Bus error“ 

Arrays t:an silsr> be explicitly declared using the decli^ire 
keyword: 

declare -a acrayname 

Finally, arrays can also be created and initiali7:ed with values 
using parenthesis. Each value is separated by spaces: 

coiors-t red green blue yellow 'light orange' black } 


Welcome 

There are several aspects of the bash shell chat just seem 
undeaitilized. typically, there are gcxxl reast>n.s behind that: 
some features seem incomplete, or a bit strange when coming 
U> bash from another language. This month, we'll dive into lx)tli 
of these facets of bash by talking about performing math 
operations and dealing with arrays. Read on to learn more 
alxMit these features which are really nice to have in a pinch, 

Arrays 

Let's Stan with airays and build up from there. An anny is 
a data structure tliat group similar elements, each selected by 
one or more indices. At a lower level, each index is just a 
pointer to a location in memory. Since these* e[ement.s are 
typictilly all of fixed storage size, the Itx'ations are typically 
predictable. Modern versions of bash support arrays directly, 
with no funny workarounds. 

You've likely worked wiili an array data sraicttire in sf>me 
context before, pc*rhaps even another programming language 
like Java, C or Python. Bash supports basic, one-dimensional 
arrays. Index values are j>cisitive integers lieginning at zero 
(bash arrays are zem-hased). One problem to note now; non- 
integer values for an index silently covert to zero, the first 
element of the array Be c-areful of this. 

Arrays “just work" when used. Third line here creates an 
array: 

color""blue" 
username [Oj='‘aike ** 

'Ihere is no need to stun at zero, though. Nor Ls there a need 
to keep a strict order. Tltc following will al.st) create an array, 
lliis lime with three elements: 


'Ihis method of initialization allows for a nice trick: using 
command substitution to fill tlie array: 

colors"£ StC "colors.txt** ) ) 
given a text file that contains: 

fed 

green 

blue 

brown 

mauve 

black 

...or whatever you deem necessary. This allows an array to 
change at each run without altering the sc:ripl itself. You may 
sometimes see this done with a cat statement: colors=( 
$ (cat colors. txt) ). This Isn't auful, but il dtjes spawm 
another process, it's not quite asS nice as die Ijuili in 
redirection that will neatly read the file into the anay. 

Why dtK\s this work? Isn't the array .supposed to be 
.separated by spaces? Well, ye,s. Bash will silently auto-convert 
the newline character to a space and initialize the array 
tiroperly, Nicel 

To access elemeal.s of an array, you must use curly braces: 
echo $f ermsg[ 15 j,) 

.Arrays have some special subscripts that make working 
with them easier. First, is the W subscrijX, representing all 
elements. Given an array named colors, the following will 
print every element in the array: 

printf ‘'%s\n’* colorB [#] 1“ 

Of course, you may afso want to act on c-ach element of the 
army, wiiich is an ideal job for a loop: 

for color in *$kolors [@1 r; do 
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echy $color 
doni! 

As shown la.sl monlh, Lht: symlx)] returns ihe length of a 

variable. When used witli an array, it returns the count of 
elements In the array. 

ccilorcount=$ f^colors [ 

r won't pretend that this covers m^rything about arrays in 
bash, ):iul it does cover the necessary basics and is riKac llian 
enough to be usefuf 

Array Example 

As an example, 1 recently wmte a quick script tliat creates 
a short report of file changes in a ticket database. However, 
these changes are many to one: many different files could point 
to the same ticket numljer 1 tracked lliis using an array. 

When retrieving the hie, I kxik up its ticket iiuniber, Once 
found, I test Shle_ciesclSricket_no| for a tiescTiprion. if it exists, 
no need to re-add iL If not, 1 add the description found and 
move to the next file. The process looks sometliing like this: 

fyr file in S (ciat filellnt,txt) i do 
ticket_no=$ (lookuip_ticket $file) 
if ff Sfile_descfStlcket nnl ^ 11; do 

$file_de£3c lSticket_noj=S(get_desc $tickflt_no) 
fl 
done 


From there, 1 get to dump out each entry in $fi]e_desc for the 
report. That's a nice, basic example that uses several of the 
concepts introduced above. 

Math 

Like arr:iy.s, math in bash has gotten easier in contemporary 
releases. 1 won’t go deeply into the conventions of tfic past, 
only to note that if you examine an older script written by 
someone else, youTe likely to see several conventions and 
keywords. Consider all of the following deprecated: 

The 1eL keyword: let x=7+7 
The ‘expr’ keyword: expr 6/3 
Square brackets: echo S [ 2 + 2 ] 

Modern versions of bash include aritlimetic expan.sion for 
expressions enclosed in doubleqiarenthesis: 

tn:hf> ${( 1 + li )) 

or 

a=$C( Sb + $c 3) 

This is much more simple and consistent, right? There's also a 
compound ct>inniand lliat maps to true and false for purposes 
of testing values without the need to expand them: 

if (E = 5 )): then 
echo *'ii is “31 Exciting!" 
fi 
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llie bcjsh arm page, under the secTjon, “Anriimetir 
Evaluation," lisLs iJic opemiorh iliut ilie .shell understands in 
(>rtJer of decreasing precedence: 

id++ id— variable post-inert'men I and fx>sl-decrenient 
++id —id variable pre-increment and pre-decrement 

* + unary minus and plii.s 

! - logical and bitwise negation 
** exponentiation 

* / % multiplication, division, remamder 
+ - addition, subtrac:lion 

« » left and right bitwise shifts 
<=>=<> comparisSon 
= != equality and inequality 
& bitwise AND 
^ bitwise exclusive OH 

I bitwise OH 
&& logic^a! AND 

II logical OR 

expr?expr:expr ci>nditional operator 
= ♦=:/= %= += -= »= &= [= assignment 

exprl , expr2 coninia 

rhe order of evaluation follows the comim)n math 
"PeMDAS" rules: (left-to-right), Parenthesis, Mukiplicalion, 
Division, Addititai and then Subtraction. Parenthesis can 
override ordering rules. Some examples: 

$ x=10 

$ 5t( Sx / 2 )) 

5 ^ 

$ echo $(C Sx + 3 J) 

13 

$ echo $(( t2+3)*‘2 }) 

25 


Now, you may liave seen the list of operators, gotten 
exdic^ and ran cjff to tr>' some of iliis exciting bash math out 
r>n ymn own. Of cout'se, you got up to division and tried “echo 
$(( 5/A W only to get a re.su It of “0". Is thj.s a bug? What gives? 

Adding Complexity 

You may have noticed one thing abttul the malit examples 
given: Tliey all evaluate to integer-based results. This is not a 
bug, it's just all that bas!i can handle. Integer math is built in 
and perfedly applicable lor many situations. What if you need 
floaling-poim re.sulls? You're not out of luck, but the solution is 
not built in to bash. 

be is a binary^—external to ixish—that has shipped with 
every version of OS X I've ever tested it on (this ineludcs iO.3 
and up; 1 can't vouch for 10.2 and earlier. I hope you're not still 
targeting iO.2 and earlier for anything at this point, though). 

be Ls a “calculator language" that uses arbiirary precision 
numl>ers for cakulaticjns. You read that right: it's a “language" 
While the lull language resembles C to a large degree, don’t be 
scared off, as the basics are really accessible, Here's a basic 
example: 
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$ echo + *8" | be 

3.5 

WeVe *echo’mg the equation u> a pipe, lo lx: picked^up on 
stdin by be. Pretty easy^ right? One caveat to this: if all values 
are integers, be will want to produce an integer result by 
default. 'Ibis t*auses our earlier example to slili fail, even wiili 
lx:: 

$ echo *^3 / 4“ 1 be 
0 


You can even make tills a little easier by defining a bash 
funciion to handle arbitrary math for you. Try the following in 
your .bash_profiIe: 

function calc 0 { echo *scnle”4: $1" | be; 1 

From there, you can do this: 

S cnlc 5*5/2,3 
2,3913 

or this: 


The solution is to provide a scale, or, the precision. Always 
provide a scale for be to use: 

$ eebo *‘scale“2: 3 / 4** | be 
.75 

Use command substitution to store the value in a variable: 


S calc '(5.2 + 3.6) * 3' 

26.4 

Note ihe cjuoles used to group expressions that contain spaces 
or parenthesis. 

Conclusion 


S reiult^'Siecho ''ficai€^2; 3 / 4" [ be) 

$ echo $resalt 
,75 

$ finai=S(echo ■*scaii?=2; $result ‘ 7“ | be) 

$ echo Sfinal 

5.25 
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while iCs really easy to simply use bash to string togctlier 
commancLs to nin in set|uence, dieck exit codes and possibly 
add some conditional logic, l>ash has developed into a much 
more capable scripting environment. While I fully endorse 
moving on from bash onc’c a script has hit a certain threshold 
of complexity (or you fcjrcsec the complexity before 
beginning), there s a utility in being able to run qiiick-and-<lirty 
saipts lor one-off jobs or for a c]ijick pjototype. Also, while you 
may not press all of iliese concepts into service in bash, it 
should let you dissect scripts that come from others who do 
take bash scripting to the extreme. 

Media of the Month: Ftrx^y: Ihe Campkie Series. If you 
haven’t seen this sci-fi gem. it’s available on DVD, NetfUx and 
in n'ones. 

We certainly hope to see you at the first MacTech 
Conference in NovemIxT. 

See http://www.maclechxom/conference for more 
information. 
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COtESEC SKUtnV lona Em ADMIHKIIUIDEK and EmNAMWEBS: 


Enemies At The Gate 

Welcome back to CoreScc. Last month we ciiAscussed the 
Payment Card Industry''s (PCD security reqtiirenients that apply 
to anyone making creel it card transactions in retail or (jnline 
stores, litis monlli we will take a look at preventing 
unauilKmzed access to your network, wiretl or wireless, in help 
achieve some oi tlie points required in PCI and other regulatory 
reqiiiremenis. More importantly, controlling access to your 
network and tlie resources llterein should Ix^ the mantra of any 
adininistracor. 

When administnitf>rs ctmsider network security, lypolly 
firewalls and wireless rijiiters come to mind. While wireless 
Asecurily lias ctrme some distance since its inception, shared 
passwcxds have an inherent management issue for medium to 
large infrasinicmres. When stjmeone leaves or is dismissed, llie 
pers(jns password must lie reset on alt the devices accessing 
the network. Additionally. hc?w' do administrators ensure that 
imauthori/ed ec|uipmeni and users dorvi gain acces,s via a 
conlerence rtxJiu Ethernet jack or some other wared p<art, like a 
neiwaKk printers Ktheniet jack? Itiis is wiiere the H02Jx 
metlKKlf>Iogies come in. 

Introduction To 802. lx 

802-lx. not to be confused with H02.11(a/lVg/n). is not a 
wareles.s standard; rather it is a set of network access sfandards 
originally proposeti by 3Cx>m. HP and Microsoft and accei>ted 
by the IEEE Hnstituie of Electrical and Electronics Engineers) in 
1999. Tile standard w^as initially developed tor controlling 
access to wired networks and is now^ used for Ixali wired and 
wireless. Though this may seem ven.^ leclmical and vague, it's 
quite the opposite. If you have ever visited a hotel hooked up 
to their wired or wireless netw^ork and had to enter a username 
and pasASwx>rcl. <xids are you have used 802.1x. While tliis is a 


simple example, it still accomplishes the puq:)ose of keeping 
unauthorized computers off tlie wired or wireless network. 
1'here are as many ways to implement 802,lx as there are 
brands of network etjuipmeni, but some sinq^le principles 
apply to all 802.lx irnplememalicjns. Let's take a look. 

One of the side benehts to implementing 802. lx. oilier 
than the obvious layer of authentication control u> tfie network, 
is that it can lie used to prevent ^liubbing,!* or connecting a hub 
lo an Ethernet port deAsignated for a single device and tlien 
h(K>king up numerous unauthorized devices to that port. 

The Basics 

'Ehere Is a minimum of three parties involved in an 802. lx 
authentication se.ssion: the supplicant, authenticator and 
authentication server. The authenticator acts as the security 
guard ensuring ihat any device or user aitempiing to access die 
network is properly autljcnlicatcd: it receives credentials From 
the su]>i>licant and forwards them on (often called proxy) to the 
authentication server. 

Tlie .supplicani is a piece of sofivvsire or finmvare on a 
device that crommunicates with the authenticator and sends the 
lequued authentication credentials (typically enc'rypied). Why 
didn’t 1 just say username and pa.ssword? Well, l:>ecause the 
credentiais may lx: a PKI (public key infrastructure) certificate 
used to validate a device or a username and pas^sword 
combination or a combination of the two (nwjre on ihLs later). 
The supplicant can leverage one of several published 
standards. The standard used is typically determined by the 
existing networking equipment (switches, wireless access 
points etc.). The current standards are: 

EAl^-TLS: Transport Layer Security. 

EAP-TTLS: Tunneled Iranspon Layer Security. 
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REAP: Protected RAP. 

LEAP‘ Liglitweight EAP —Original standard, deprecated 

[Cisco Stdl. 

EAi^-FAS'r—Flexible Authentication via Secure Tunnel. 

[Cisco Std] 

EAP-SIM—Subscriber Id. Module. Used by GSM networks 

[Cisco Stdl 

EAP-MD5—Message Digest Algorithm (For Wired 

Networks Only) 

The authentication server, typically a PADIUS (Remote 
Authentication Dial fn User Service) service mnning on an 
existing server or workstation provides the authentication of the 
user or device and, once validated, gives the “ok'’ to tlie 
authenticator to allow the user or device onto the network. 
Why d(x.\s this technology use RADIUS? RADIUS was used for 
many years as a method for providing rapid authentication to 
dial-up users conneaing to services like America Online, MSN 
and NetZero. Tt has proven itself U) be a reliable, fast method of 
autlienticating network access. So tliis sounds like it's going to 
add one more layer of complexity to your network with yet 
another set of credentials for the user to remember tight? Not 
so. Most RADIUS implementations like those from Apple, 
Microsoft and even Cisco interface with your existing directory 
infrasti\icture to allow users to utilise rheir exi.sting credentials, 
and do so quite seamlessly. Providing R02.1x is typically a four- 
stage process: 

1. Initialization - When the authenticator detects a port coming 


live on a wired network or a new device on the wireless 
network, 802. lx traffic is allowed to and from that device [>UL 
all other traffic is dropped. 

2. Initiation - The audicnticator regularly l)roadcasLs identity 
request frames at layer 2 (the data link layer of the OSl 
model) on the local network segment. The client device’s 
supplicant is set up to listen for these requests and upon 
receipt of the identity request responds with an identifier. 

3. Negotiation - I'he authenticator will request a session witli 
the authentication server which provides the EAP standards 
available to use. The authenticator then negotiates the EAP 
standard with the supplicant. Of note here is that die 
supplicant is still not on the network nor is it fully 
audicnticatcd. The negotiation settles on tlie standard to be 
used between the parties and the supplicant securely 
tran.sm[ts the credentials. 

4. Authcnticadon - Upon receipt the authenticator will proxy 
the credentials to the authentication server and if’ accepted 
the supplicant is informed via an EAP acknowledgement and 
then allowed to access the network. 

An Example Implementation 
Walkthrough 

Implementing 802.lx can seem pretty daunting but in 
Apple’s typical fashion they have made implementing 802.lx 
with Mac OS X Server and the Aiq^orl Express or Extreiiie quite 
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simplt^, IjcI's take a t[uick walkthrough of how simple it truly is 
to take your wireless netw^ork authentication to the next level. 

Before we get started we need u> address a chicken and 
egg situatkm pn>duced by the nature of wireless 
conununication. How do you manage a machine that is 
connected wirelessly to the network wathc3ul the user l>eing 
logged in to the network and hence authenticated against your 
802. ix? This has prevented many an administrator from 
implementing 802. lx, as they tend to apply patches, fxrrfonn 
installations and other administnitive tasks during maintenance 
cycles when users are not (or at least shouldn’t be) logged in. 

One solution would be to use device authentication only, 
if die device is an auLh<jrizcd device than it can talk to the 
network. However, this is somcwhit limiting— it doesn’t 
provide any user level auditing capabilities and if an 
unauthorized person gets hold of a laptop, they liave access to 
your network. In Snow Leopard, Apple has reset!ved this issue 
with mixed mode authentication in the supplicant. This 
provides lx>th device level and login level auiheniieaiion. The 
device is authenticated to the network prior to the login screen 
window becoming active by using its machine credentials; this 
allows administrators to administer the device without a user 
being logged in. Once users attempt to or successfully enter 
their credentials, kigin mode is initiated and an 802.lx session 
is re-established based on ilie user’s credentials, ensuring tmly 
authorixed users have access to the network. In a rollow*up 
article next month, well see how to use certificate-based 
authentication and make this process more secure. 

So let us set this up. On the OS X st‘rver, add the RADIUS 
service it) your list t)f available services in Server Admin. Use 
the AssisUint button to automatically conhgure RADIUS and 
sjX'cify your Airprart Extreme (Time Qipsule or Aiqiori Express 
will work as w^dl). 


Be sure to specify a certificate for the RADIUS 
conimunicdtion as seen Ixlow. Notice there is an Edit 
Allow^ed Users button that can be used to restrict access to 
the network via a Service Access Control entry, 
llnautharizcd users will not even lie permitted to start the 
802. lx conversation. 



Figure 2 - RADIUS certificate and user authentication 


That’s all there is to .setting up the server side. Now, for your 
client machines, you can create an 802Jx profile on one 
machine and either deploy it using an installer package or 
via UNIX commands in ARD, Tt> set up the client machine 
for mixed mode 802. lx, open System Preferences and the 
Network pane. Click on ilie Airport you want to configure 
and then click the Advanced bulion. 
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Figure 3 - Client side 802.1 x default setup 


Select the 802. lx tab and then create twro profiles, a system 
Figure 1 - Associating your AirPort to a RADIUS server^ profile (seen below') with a system wide device u.sername 

and password (not the user name and password). 
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Figure 4 - 802.1 x setup for mixed-mode 


to be getting some traction. Port knocking is typically used 
in a firewall but can be used for internally firewalling 
restricted resources. Technically, port knocking uses a 
connection attempt on a set of ports in a certain sequence 
(like a secret door knock for your clul)house when you were 
a kid), which opens access to the requesting user if the 
sequence matches the authentication sequence. Another 
technology is packet level authentication and auditing, 
where the TCP header has an authentication value of some 
type generated by software on the client which is used \o 
authenticate and audit every packet sent from the client 
through the firewall or network switch. Both of these 
teehm^logies are adolescent in maturity and haven’t received 
wide industry adoption yet. But, that may change and there 
are several successful open source projects for \joih of these 
technologies. 

Conclusion 


Add a login window profile, leave the defauU 
Authentication EAP types for both profiles and specify the 
wireless network name and set the Security Type as WPA2 
Knierprisf. Don’t enter the user's credentials into this 
windo^^^ Next, turn on the Airport, authenticate and off you 
go. Now, only users with proper credentials and an 
authorised device will l>e able to get access to your wireless 
netw'tjrk, no exception. One caveat here is if you are using 
a self-signed certificate on your server, you will have to 
install that certificate as trusted on ytnir client machines. 
Once configured on one client machine the S02Tx pniflle 
can be exported and command line tools can he used to 
deploy this profile en masse. 

Enemies Inside The Gates 

So now that you are all set protecting against the 
enemies at the gate, what about the enemies who are 
already inside the gatesi* As indicated from most sources, 
data theft Ls primarily an inside job not some scheme from 
hkieous hacker consortiums. So how do you protect against 
these threats internally? Any advanced network switch or 
wireless access point will support something called VLAN 
(virtual I,AN) swinging. After authenticatitjn by B(J2,Ix the 
user or device is placed into the appropriate VLAN where 
VLAN security is applied preventing prying eyes from 
accessing information they shouldn't have access too, such 
iks iPiionc 5g sfx'cifications or schematics. The combination 
of firewalls, H02. lx and VLAN security technologies provides 
an auditable, miilli-tiered approach to preventing breaches 
from outside and within organizations. 

More Advanced Techniques 

There are some newer access control techniques being 
developed and in some cases implemented that sliould be 
mentioned here. Port knocking, one such technology seems 


In a society inundated with information and ihreats to 
personal information, stepping up your security posture is 
never a bad idea and 802.lx pnwides a robust method to 
take your nctw^ork .security to the next level without a ton of 
cost or administration. It is the goal of this writer and this 
monthly column to make you aware of issues such as these 
and help you address them in your organization. We strive 
to make this column as pertinent to you, the reader, as 
possible so please feel free to email mikeh@mactechxonn 
and provide feedback <jr ttjpic.s you would like to see 
addressed in our upcoming editions. tSluy safe, and secure. 


At I 
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Introduction 

in this month's MacEnierprisc, wc'II take a look at 
Aciolie's new tool for preparing Creative Suite S products for 
installation in an enterprise environment. This tool is called 
“Adobe Application Manager, Enterprise Edition® or 
"AAM EE" for short. We'll examine how it works, what it does, 
and how it unfortunately hdls short of its promise. 

History 

Installing and removing Adobe products has always 
Ix^en a challenge in an enterprise environment. There have 
lx*en two key issues. The first has been that Adobe pnxiucts 
have not generally been distributed in the Apple package 
hirmat. which would allow them to he installed using 
familiar tools - the same tools youd use to install viraially 
any other piece of software in your organization. Secondly, 
not only have Adolx products been distributed in their own 
format, but Adobe has used may different installation 
formats. 

Creative Suite 3 

Ear Adobe Creative Suite 3, Adtjbe dt>cumented a 
method to create ''silent installs" of Adobe CS3 products. 
These silent installs allow'ed the administrator to customize 
which applications in a suite were installed, alltrwed the 
adminisStraior to pre-license the applications, and also to 
o[)tiunally disable automatic updates, reglslration dialog.s, 
and the End-User License Agreement dialog. 

To create such a silent installation, the administrator 
needed to run the Adobe CS3 “Setup® program via the 
command-line with a special record=r' switch. After 
making installation choices, a ccmple of XML files were 
generated describing which Adolie CS3 components were to 
be installed or removed. Additionally, the administrator 
needed to hand-create an additional XML file containing 
licensing and other configuration infonnation, then copy that 
to a specific folder among the product payloads. Finally, the 


administrator needed to run a eommand-Iine process that 
used the installer payloads and the XMl, files u> “silently® 
install the Adobe CS3 product. You can read more about the 
Adobe CS3 deployment process here: 
hitp:// www.adobe.conn/support/depioyment/cs3_deployment.pdf 

Tltis solution had some issues. The proce.ss of creating 
all of the needed files and getting them all in the right places 
was tedi{)us and error-prone. Even when the administrator 
gut evcMything correct, the “silent” install w'asiVt really silent. 
An icon for the Adobe Setup program apfieared in the Dock 
during installaiion, and various disk images would appear 
and disappear from the desktop while the install occurred. 
Still, these techniques made it possible to depk>y the Adobe 
CS5 products in an automatetl fashion. 

Creative Suite 4 

When Adobe released Creative Suite 4, they attempted 
to address at least one of the iiiafor issues with the 
tie ploy ment solution for Adobe CS3. They still supported a 
workilow similar to that used with the CS3 products, but 
they also introduced a new tool - the Adobe Enterprise 
nepltjymeni Toolkit. This tool helped create InsiallaLkm 
“packages"' which encapsulaTed the files needed to perform 
a successful “silent" install. Adtiloe also wrote more in-depth 
riucumentatiun on deployment and provisioning planning 
and implementation. You can download the CS4 Enterprise 
Deployment Toolkit and supporting documentation here: 

hllp:// WWW. adobe .com/devnet/creotivesuite/enterprisedeploy 
ment. ht ml/#cs4_edt 

While the new tools and documentation were helpful, 
truly silent installs were still not possiide, as the Setup icon 
still appeared in the Dtjck and disk images still appeared on 
the desktop. More importantly, as with the previous solution, 
deployment workflows that relied on standard Apple 
packages could not be used. 

.Some commercial software deployment tools added 
support for the Adobe deployment w'orkflow; first adding 
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support for Adotjo CS3 installs^ and then later addinf^ support 
for aS4. 

Other Adobe products 

This actually leads to yet another problem with the 
Adobe deployment tools -- there are too many! Each of the 
followioft Adobe softw^are items has a different style of 
installer, requiring a dirferenl workflow: 

Adobe CS3 product 

Adobe CS4 product “packaged"" with Enterprise 

Deployment Toolkit 

Adobe CS3/CS4 product updates 

Adobe Acrobat Pro 

Adobe Acrobat Pro Updates 

Adobe Reader 

The frustration here is that the additional work 
mastering the deployment of one Adobe product might not 
carry over to the depioynicnt of another Adobe product - 
through the release cycles of the CS3 and C*S4 products there 
were six different styles of Adobe “installers” to deal with. 

Creative Suite 5 

Enterprise customers made their dissatisfaction with the 
Adobe CS3 and CS4 deployment tools knowm, Adobe 
announced lliat with the release of Adobe Creative Suite 5, 
they would provide tools that allowed enterprise 
administrators to create Apple Installer packages to deploy 
Adobe CS5 products. This would allow enterpiise 
administrators to use die same tools and workllows to 
deploy CSS products that they already use to deploy most 
other softw'are. 

Enterprise administrators rejoiced at lliis new s. While the 
Apple Installer package Ibrmat is not perfect, it is well 
understood and supported by a wide variety of toois, and 
m 2 iny administrators are familiar and comf£)rLable wath 
w^orking with Apple packages. 

In early June 2010, Adobe released a “preview^” of Adobe 
Application Manager, Enterprise Edition (AAMRB), With this 
tool, administrators can build an Apple Installer package 
from Adobe CSS installation media. 'I'his package can then be 
used in workflows that utilize the Apple-styte packages. 

Working with AAMEE 

After dovvnhxading and in.sialling AAMEE from the disk 
image available at bttp://www.adobe.com/devnef/ 
creativesuite/enterprisedeploymenlhtmL you’ll find the tool 
itself in.stalled at this obscure location: 

/Library/ 

AppllcatJnm Support/ 

Adobe/ 

OOBE/ 

PDApp/ 

Enterprise/ 

AdobeApplicationHanagerEnierpriseEditlon.app 


The jn.sLallcr helpfully launches AAMEE for you after 
installation, but if you ever want to run it again in the future, 
it s helpful to know^ w'here it is. 

Once launched, AAMEE reveals itself as an Adobe AIR- 
based application, complete with non-standard user-interface 
elements. You must name the installation package you want 
to create, specify w4iere to ,save it, and select the Adobe CS5 
product installation folder, ty[)ically from a mounted disk 
image or physical DVD. The welcome screen is shown in 
Figure 1, w4th some values for building an installer package 
for the Adobe Production Premium CS5 suite. 



Figure 1 - AAMEE Welcome screen 

Subsequem screens allow you to enter a .serial number 
(or clioose to install without a serial number), select which 
components of the suite to install and disable product 
registration dialogs, automatic updates and the like. These 
final choices are depicted in Figure 2, 


Mb# ApDlpUElOn ■' 



Figure 2 - Deployment configuration options 


After you"ve made all your choices, AAMEE will build 
your package, which will take .several minutes. Figure 3 
shows the build in progress. 
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Figure 3 - AAMEE builds the package 

When it's clone, you are shown a results Sutmiiary 
screen, You can then ciiiit AAMKF. 

Lei's examine AAMEE's ouLpuL Look in the location we 
specified as the Save to: location in AAMEE’s Welcome 
screen. There will l>e a Build folder and an Exceptions 
folder. In the Build folder, you1l find two packages. In the 
example shown hack in Figure 1, I used the package name 
""CSSProdiictionPremium," so the two packages in the Build 
folder are named "CSiPiQductionPieniium_Install.pkg" and 
T.S5ProduciionPremium_Unin.sialLpkg.'’ 

You cart now^ test the AAMEE-generated packages in 
your deployment workHow, Use the "Mnstall,pkg'’ to insta!] 
lire Adobe CS5 product and the corre.s ponding 
''MlninstalLpkg” to remove the CS3 applications. 


Anatomy of a Package 

Let's dig into the guts of the Tnstallpkg. Control-click 
CS5ProductionPremium_lnslall.pkg, and choose Show 
Package Contents from the contextual menu. Navigate into 
the Contents subfolder. If you've examined the contents of 
an Apple package before, so far everything should look 
familiar, and similar to Figure 4. 

. - III_I ■ n - , 1^1 


5 1^.13 GB aga^ilabte 


Name a 

Date MocnAcd 

5m 

Kind 

^ Arc hive .born 

5/22/10 4:39 AM 

37 KO 

Docyment 

Q Archive .p^x.gz 

5/22/10 4:33 AM 

4 KB 

gup comptressed srctilve 

3nfo.plliSt 

6/23/10 10:07 AM 

4 KB 

>CML property List 

Fkginro 

5/22/10 4:39 AM 

4 KB 

Docomeni 

► Q RiesouYce^ 

6/23/10 10:05 AM 


Foloer 


Figure 4 - Contents of CSS Production Premium JnstalLpkg 

In a standard Apple bundle-style package, the files to be 
installed are compressed in the Contents/ 
Archive* pax-gz Hie. Hm in tlie AAMEE-crcated package, 
the Archive - pax. gz file is far too siiiidl to contain all the 
files in Adobe Production Premium Ihe contents of 
Archive- pax *gz are listed in Arc hive. bom. We can list 
the contents wiih ihe Is bom tool 
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% cd /Users/Shated/CSSProductionPremiiun/Build/ 

% cd CSSProductl&nPremliiin^instali.pkg/Gontents/ 

% isboii Archive-boiB 
. 40755 501/20 

That’s an empty archive - no files are bein^ installed 
from this archive! More investigation is needed, let's look in 
the Resources folder, as shown in Figure 
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► Setup 
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Figure 5 - Contents/Resources of 
CSSProductionPremium.lnstallpkg 

Apple packages support optional scripts that can run 
liefore and/or after the installation of the archive contents. In 
the Resources folder, we can see three of these scripts: 
postflight, preinstall, and preupgrade. A little investigation, 
and we discover that the preinstall and preupgrade scripts 
(which in this case are essentially identical) are doing the 
actual installation. They are calling the included 
AdobeDeploymentManager program and use installation 
[payloads located in the Setup folder. These payload.s are 
identical to those found on the original installathm media. 

AAMEE Package Issues 

What we have, then, is not really a true Apple package, 
but rather an item with the structure of an Apple package 
that exists tt> run the Adobe installer from a 
preinstall/preupgrade script While this works, this unusual 
design has some definite shortcomings: 

ReceipLs “ a normal Apple package leaves behind a 
receipt that ctmtains information cm what files were installed. 
While AAMEE packages do leave receipts behind, iliese 
receipts have no info on installed files, since the bom file is 
empty. 

Progress info - Apples Installer.app and 
/usr/sbin/installer give progress-done feedback 
when installing a package, Since AAMEE packages do not 
have tradiiiona! payloads, you get no meaningful progress 
feedback from Apple's tools. Since AAMEE packages are 
intended for silent installs, presumably Adobe does not see 
this as a major issue. Still, admins who are installing CS5 
products via an SSII or AR!) session miglit like progress info 
for the lengthy CSS installs. 

Disk space usage - on Mac OS X 10.5 (Leopard), after a 
package is installed, a Receipt is created in 


/Library/Receipts. This receipi is made from the 
original package minus the Contents/Archive-pax-gz 
file. Due to the design of AAMEE packages, this means that 
the entire Contents/He sources/Set up folder, with all 
of the Adobe Setup payloads, is copied to 
/Library/Receipts, requiring several gigabytes of space. 
The postflight script deletes all the extra data, freeing up the 
space once again, but the extra space is needed to ci>mplete 
the install. On Leopard, this can raise available disk space 
requireiuenls to up to double w^hat would be required if the 
AAMEE packages were of a more conventional design. This 
issue does not affect Snow Leopard because package 
receipts on Snow Leopard are made of just the bom file and 
a plist with some package metadata. 

ilie AAMEE package design also makes it difficult if not 
impossible to use A AME E-genera ted packages in modular 
imaging workOows, like those made possil)le with InstaDMG, 
Apple's System Image Utility, or DeployStudio, to name a 
few. These workflows install software on a volume other 
titan the current boot disk as part of building an install image 
for mass deployment, or when initially building a Mac. 

More serious issues 

Must of the issues above are annoyatices, or have clear 
workaroimtLs. But there are three more serious issues that 
make using AAMHE-generated packages for mass 
deployment of the Adobe CS5 products very difficult in 
practice, 

Tile first issue is that AAMEE-generated packages whll 
not install from mounted di.sk images, li'.s very common to 
wrap bundle-style packages into a disk image. The resulting 
disk image is a single file, instead of the multiple files and 
directories that make up a bundle-style package such as 
those generated by AAMEE. Disk images are easier to store 
on non-Apple file system.s, and to store on and download 
from web servers. It is also a common workflow to simply 
mount these disk images and install directly from the 
attached volume. But AAMEE-generated [packages d<; not 
w'ork correctly in the .scenario; the Adobe Setup program 
throws an error and quits. 

One workaround for this issue is to copy the i>ackage 
horn the mounted disk image to elsewhere on the local disk 
and install from the copy; tliis again increa.ses the needed 
disk space. In a worst case, a package for Adobe Master 
Collection might need almo.st 50GB of available disk space to 
insiall: 12GB for the disk image; 12GIi for the copy to the 
local disk; I2GB (temporarily) for the receipt under Leopanl, 
and 12GB or more for the actual installation! 

Though I have confirmed that other Mac OS X 
administrators have seen this issue, and 1 filed a bug with 
Adobe, I do not know if Adol>e recognizes this issue, or 
plans to addre.ss it in the future. Only lime will tell 

The second issue is that there is ntr support for C:S5 
updates; AAMME provides no way to package these updates 
for separate deployment, nor to "slip-.sireaiir them into an 
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initial product deployiTicnL Adobe plans to address lliLs issue 
in some Future release of the AAMFE tool 

A third issue is there is no support for Adobe Acrobat. 
Adobe Acrobat Pro 9 is not included as pan of the CS5 install 
media; if the specific suite includes Acrobat Pro, it Is 
distributed as separate media. AAMEE cannot build installer 
packages from the Acrobat Pro media. Administrators are 
essentially “on their own" when it comes to finding ways to 
deploy this application. This may be addressed with the 
release of Adol)e Acrobat Pro 10, but ihafs of little help 
currently. 

The last isstie is the most serious. AAMHE-generated 
packages will Fail to install if there is no user logged in at the 
GUI. In mass deployment, it is actually preFcrahle to install 
software when there is no user logged in. You can schedule 
the install to happen automatically overnight, and you don't 
have to worry about the install affecting the user, or the user 
affecTing the install But AAMEE-generated package.s fail if 
no user is logged in. 

Fortunately, Adobe agrees that this last issue is a serious 
one. It is the reason that I he June 2010 release of Adobe 
Application Manager, Enteiprise Edition is a “Preview". As of 
this writing, Adobe has announced ihal an update will lx* 
available in early July to address this issue. 

Conclusion 

Adobe Application Manager, Enterprise Edition shows 
promise. It represents a useful step fnmard for enterprise 
deployments, and eventually should allow administrators to 
use a wider ai ray of tof>ls to deploy Adobe CS5 applications 
across an enterprise environment. Unfortunately, the current 
release of AAMEE suffers from a variety of issues, the worst 
of which prevent real-world use of pat‘kages it creates in 
many circumstances. 

Enterprise administrators siioiild continue providing 
Adobe with feedback on AAMEE and other related 
tn.siall3tion issues, including CS5 updates and Adobe Acrobat 
Pro. Adobe is making slow steps toward enierprise-fnendly 
installers. Hopefully we can continue to guide Adobe toward 
a robust, flexible solution that meecs the needs of the 
enteq> ri.se. 


WW 
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Mind Mapping 

Making your point visually 




by Shelley A. Watson 




Introduction 

Tlii,s arlicic Mcnis rnnii my t?wn experiences working as an 
Apple consultant in my own praciice for iniiny years. J wus 
delighted to come upoji mind maps as a tool, as they have 
proved to l>c a povverful, effective method of commitniaition. 1 
know from my own experience dial coinniunicating complex 
teclinical information and decision points can a real sticking 
point for c'on.sultants and IT stalT, which led me to lx)th explore 
using mind maps, and then to write aixmt the experience. In our 
consulting practice, we have liegin to u.se mind maps not just for 
customer facing conimimicatitin, but also in our stmtegic 
planning pr(xes,s. Unlike more technical tools, mind maps by 
their nature invite whole-brain thinking, exploration, and mental 
freedom to roam, 1 hope this article will iiitrigite readers enough 
to explore the myriad uses for mind maps. 

The Challenge 

As a tcchniatl profossional, one of the challenges I routinely 
face is commimicating technical inlbrmation to non-iechnical 
decision makers in a inanner that all parties am undeistand and 
tiust. Often, we as Lechniail professionals don’t control the purse 
strings, and have to convince either clients or internal 
stakeliolders and decision makers that our recommendations ate 
wortli the dollars we want them to spend. 

We liave two ruajtjr hurdles to overcome. First, technical 
information is often complex, multi-layered and non-intuitive, 
making it difficult to communicate to a non-technical audience, 
IT explanations can sound like a foreign language. No matter 
how passionate we are alx>ut a great solution, il* the listener goes 
blank, we haven't generated understanding, let alone excitement. 
Second, non-technical partners on arrive at the table wiffi a lack 
of tiTJSt in technical opinions, based on a lack of undei standing, 
poor past experiences, or both. 1'echnical professionals need die 
as.senr and sup[x>iT of non-technical partners in order to 
implement tjualky solutions tliat lK:nellt all parties. Non-technical 
decision makers ajid stakeliolders can't lx: cxyK^ted to lake 
opinions and recommendations cane blanche from the geeks. 
Rather, it is die job of die technical professional to Hnd a way to 
communicate technical information that engenders confidence, 
and that truly provides a conceptual understanding of die 


technical .solution. We have found that presenting technical 
information visually, using Jiiincl maps, is one way to addre.'ys this 
challenge. 

What Is A Mind Map? 

According to Wikipedia, "'a mind map is a diagram used to 
represent words, ideas, tasks, or other items linked to and 
ananged around a central key word or idea. Mind maps are 
used to generate, visualize, stiiicture, and classify ideas, and as 
an aid in study, organizivtitm, problem solvings decision making, 
anil writing." Generally, mind maps liave a tree structure, or a 
radial, nonlinear st re dure, reneding a free ranging lht)ught 
process. Mind maps have a single central concept, from which 
the related points branch off Sometimes they branch, 
sometimes they arrange into areas of related concepts. In either 
case, the mind map is iilustrat^^'c, and can free the concepts 
from the ry^pjcally linear, hierarchical box used in presentation. 
One of the most powerhil elements in using mind maps has 
teen the ability to use color, .shading, and oilier visual forms of 
emphasis and contrast. 

The concept of presenting information visuaDy has been 
around for centuries, according to various sources, including 
the iliustration of Aristotle's ideas by Porphyry in the third 
century. Mind mapping resurged in use in the 1970's as a 
braiasiorming iechnit|ue, but it has found iLs way into 
education, engineering and [ilaiining disciplines. Tliere have 
been attempts to the credit for the invention of the idea, 
ntxably by the British pop psyclnjlogist Tony Ruzan, who holds 
the trademark in the U.K. and the ILS. According to the website 
www.mfndnnQppef.com, the credit for the development of modern 
mind mapping belongs to Dr, Allan Collin.s, by virtue of his 
research and publislied works on the topic. All credit a.side, the 
concept is a powerful one that continues its long history of 
ilkiminating the human thought process. 

Hxcelienl sites for information on mind maps, including 
examples, and software, include Tony Buzan’s website, 
www.thinkbuzan.com/uk, vAvw.novamind.com and the 
mindmappercom website listed above, 'lliere are also several 
blogs that attempt to corral information and resources about 
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Figure 1. Risk Reduction Mind Map 


mind maps into a central site, including 
www.mindmopping.typepodxom, and www.themind- 
mapperwordpressxom. We use the NovaMind software for 
creating fJiir mind maps, wliicli we discuvered tlirough cjur 
association with the Apple Consultants Network, 

Illustrating a single, complex idea 

One of my first attempts at a mind map came from the 
desire to communicate to customers the multifaceted notion 
of risk reduction. In a l)usiness setting, there are so many 
components to reducing overall risk that a bulleted list 
neither does them justice, nor groups the ideas effectively. 
The mind map certainly did a good joli of tllustraiing the 
many coniponenrs, down to a finer grained level of detail, 
while keeping the overall concept central, But the real bonus 
%vas that as 1 brain dumped the information, doing so with a 
mind map made the process much easier. It fell creative, and 
it went very quickly. Refining the information was easy, since 
using a mind map is well suited to the way one's mind jumps 
around between topics. Rather than getting sidetracked by 
ideas coming up randomly, the mind map provided a 
framework for capturing the stray bits and knitting them into 
a whole. 


Guide The Planning Process 

Mind maps can also come into play during a planning 
prcxx'ss; pariiailarly one where the existing infrastmeture is either 
in a disorganized state, or not undei^;tood very well. If a customer 
doesn't have a clear grasp of their existing stmcaire^ it can be 
diffiailt to gain agreement on needed improvemenls without 
clarfication. A facility where equipment is scattered, and 
documentation out of date can compound the diffiaJlty^ A recent 
example of this a non-profit with a mixed Mac and PC 
architecture. Explaining ht)w the scattered servers and services 
woLild integrate with the recommended upgrades was 
problematic. In this case, a mind map with the exi.sting and 
recommended servers listed helped bring order to our 
recommendations. 

This situation also presented unusual challenges in 
communicating with the variety of stakehoiders. The internal IT 
staff needed help bringing order to the different parts of the 
system. His manager, the non-technical decision maker, needed 
to be able to understand what was being recommended, since 
ushe in turn was responsible for selling it to the even less 
technical Board of Directors for approval. As tlie IT consultants, 
we knew' w^e only had access to die internal IT staff member, 
and limited access to his manager. We had to present die 
information in such a way that a) it was ledmically accurate; i>) 
made sense to non-teclmical readers, and c) didn’t require 
additional explanations. 
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ScTveni A £4 B are existing seivers; one needs upgradng. the 
teller ran \y^ leit as is. St-rvcT C, slK)wn in a diJTerent color for 
emphasis, will puichiLsed, aixl tlie services show acklai to the 
infrcismiauac Color i.s used to IxMli associate items (the Vwo existing 
serveis), and dilttncTilLile them (the new seiver and its services). Tlie 
non-techniail decision iviakeis were able to grasp the 
Txxx)nitnend:ili(>ns eirsily; tlie internal ft* saili'was able to use ilUs map 
as a tcxil \a SLipixiit tlxdr nilionale :ind lottifinncncbaions. llespite a 


tiglit budget, the board approved the upgrades and additional server. 
A clear, sucx^inct map hel|xd tills project get approved and tompleied. 

Selling The Implementation 

We recently liad a customer who was finally buying off on a 
niudi-needed liiiidware upgrade. We*d lxx.*n Uilking to tliem alxxit 
this project for nearly two yean^, and tliey liad grudgingly agreed to 
upgrade to a dmii Kserve model hxm a single tow’er server However, 
talks brx;ke down at their suggestion tluii they upgrade the tower, and 
delay the second Xserve purchase tor niityl^e 6 months, Our assertion 
that the cmi was greater Hew in die fac'e of their sense tliai upgrading 
ti)WLT would we money. On the fece of it, upgrading,seems logiai!, 
liglit’ You keep tlie equipment going as long as you can and dien buy 
the .set'ond server tmly when you need to. Customers are already .so 
worn out witli die diree to four yetr replaceineni cycle dial Uiey yearn 
CO find ways to make equipment last longer. But when we TOOsidered 
the pfojett from a lechniail planning standjXJint. it was actually 
cheaper in peison-liours to configure the two servers side by side than 
it wiis to spend time on Uj^grading a box ihat's on iLs kst legs and then 
liave to craft a single .seiver by iiscHf in 3-6 months. We tried liaving 
this disciissit jn in a meeting, hut our teclmical Uilking points made the 
customer's eyes gla/x^ over. We kejit losing them lo dieir fxiief tliat it 
was chetijier to tlx up than mpiace. An Excel spreactelTeet widi 
numbers in tables for txanparistjn didn't make the point. We ncedcxl 
anoilier way to make our point, and fiisl. 

NovaMind fiom NovaWjrks came to tlie lescue. We liad two 
timelines in the visual, one for tlx refilaeement and one for the repair 
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Figure 3. Deployment Process Mind Map 
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plus ev^tual nq^bcenieni. The prt:)jtxi sicps had cstij nates for die du;ti 
Xserve deployment vs, die delayed deployment for all implemenuKbn 
tofiCs. Granied. it ws nothing :utistic, bur the visustl repti^.Ttiation 
made nioie sense to the customer dian anj^iJiing else w liad 
pnesenied. laid out visually, die customer cxjuld see die longer timeline, 
incTjJTing intiie coasuking ctists. You cm see from the diagnati diat 
although the cxjsi of the Xservi^ + CS optitm liics a lower total numlier, 
tfuit total is kibeltxl as die dela/s cost, sinc'e it does ncx incliicb the 
dcploynx-Til of tlK' Piist Xserve. Tile greater numlxrr of additional steps 
were clearly illustmted in die mind map, along widi die lekitively fewc^' 
Steps in the dmi depbyiTienL Tlie customer took one look at the vLsiml 
and liouglil olTon die dual Xserve deployment. Ihe mind ntap, widi 
its visual display of the ncklitional steps and lalioi' ans involvcxl got 
the ixani across surprisingly lieticT tlian c^ur traditional exist 
spruidslietl 

Using NovaMind 

One rcutune I partkukirly like about NovaMind is ilie 
piesenuitkin tool built into the .software. Radier diiin convening die 
mind ni^ip to a pn^miaiion slide deck, arxl adding tniasitioail effetis 
rnanuilly, NovaMind lias a |iresentation nitxle that animates dx^ 
display of the c'onc'e|Xs and their branches. For cxirnple, in the ri.sk 
reduction mind map, 1 iim set die aninuititjns to show Hn4 the ctite 
concept, them the first level cliild oince|its Next, the .solhvafe 7tx>ms 
die display to fixtis on one d' the child (xmcepis, ihcti its branchet^. 
This feature makt*s turning a mind map into a firesenUition as simple 
as possible. 


NovaMind provicies a great deal of free training on their product, 
including a 1 Way Mind M;ipping videti cxiiirae. It cx)n.sisLs of 
14 lessons over 2B days, each w ith an ioinxiuction to the topic, and 
link to wiuch the oouise video online, NiivaMLnd also piovkte many 
examples of mind map^, most of which include graphics and oilier 
visual tools not included in my samples. 

Conclusion 

We have found in the la.si year dial when we liave challenges 
cxxnmuniaUing widi customers, mind mails are on our list of ttx)b to 
os'ercome tlie gaps in undetH:;indtng, Our pisl success widi die visual 
style of the mind map has .shewn u.s its efficacy in communicating to 
non-tech nit:al partners. Rather lliiui die traditional '"leading left to 
rigiit'' linear inediod, a mind m;ip allows the viewer’s brain to see 
evetyihing at once, and gmsp concepls shown witli visual emphasis 
like nibr, txmirasi. graphic's and relative size, A well-thou^t oiiU well- 
craficxl mind map can go a long way to overeoming iniditit>nal 
Ixtrrim in communientfon benwetn ttxiinkal and non-technical 
partners. 

All 


About The Author 

SheUey Wafson has been aMadntosh cansuftant and trainer far IS years. 
She is Oft a quest to answer the eternal questiarf, ^1/Vhat's for cBmer?'', 
She can be reached at shehy@wheelwrights~lk,com. 
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When and Where? 

MacTech Conference for IT Pros and Apple developers is November 3-5, 2010, In Los Angeles ol the Sheraton Universal in Universal 
City. Tlie three-day, packed event will have sessions and activities throughout the doy and evening giving attendees the opportunity 
to not only learn from the best, but to also get to know others in the industry. 

Two Session Tracks. 

The MacTech Conference will hove two separate tracks; one focused on IT, and one focused on programming/development. 

Sessions will focus on both desktop and mobile, with appropriate levels of attention paid to the Mac, iPhone, iPad and iPod. 

Packed Schedule. Morning 'til Night. 

You won't just be in sessions heoring about great technologies and products. MacTech Conference has a packed evening schedule 
designed not only to be fun, but also to give you the opportunities to get to know your fellow attendees. This includes an exclusive 
trip to the world renowned Griffith Observatory, and a party at Jillion's that includes the new MocTech Bowl. 

All Meals Included. 

This is an immersive conference, and as such, the time you spend with peers you know and new people that you meet is as important 
as the sessions themselves. We'll be feeding you throughout the event not only to make it all inclusive, but also so that you can 
maximize your time with other attendees. 

Space is Limited. 

We have a limited number of conference attendee spots and hotel rooms available. As a conference with hundreds, not thousands, 
of people, we wont you to have time to get to know people. But, that also means that (like other conferences in the Apple market) 
if you don't act fast, you may miss out. 


Subscribers Get Special Pricing. 

Everyone could get the early bird pricing in the beginning, but current MacTech subscribers can take advantage of it during an 
extended early bird window. But act fast! Even for subscribers, it ends soon. 










What is NSConference? 

NSConfereace is a multi<lny cDnference put on by the 
venerable Steve Scon of the Mac Developer Nerw^ork, 

Scotty does a lot of wonderful things for the Mac and il’hone 
developer conniiunity, including his podcast, the MDNShou\ In 
2009, he decided to branch out into [:>Littirig on his own 
conference. This firsi year, i)ic conlcrcncc look place nnty in the 
United Kingdom. For 2010, Scotty expanded the conference to 
the United States and put on the conference in hoih the UK and 
US. In interest tjf full disclosure, I was a spt:aker at this year’s 
conference. 

The Structure 

There were three days of .sessions and t)ne day ol' longer 
training workshops. The three session days were broken down 
into iwtj days of Mac-related sessions and one day of iPhone^ 
related ses,sions. As with most Mac and iPhone-related topics, 
however, there was a lot of crossover lietween the two t}pes. 
For exaniple, my lafk was on <iean code was parr of the Mac 
sessions, but pertained ecjually well to iPhone prtjgraminers (at 
least I hope it did), 

The sessions ai the UK and US versions w^ere generally I he 
same. There were minor differences due to sclieduling conliicts, 
and the speakers were free to change iij) their presentation 
slightly, IVe included a list of all the sessions at the end of this 
article. The fiilFday work slurps were classes concentrating on a 
single topic. 'Hie topics were generally quite technical in nature. 
Some were alx:)ut specihe APIs or technology, along ilie lines of 
presentations you miglii expect ai Apples VX^DC. Others were 
topics that you would never scr at an Ajj[)lc sanctioned 
conference, and still othejs were more abstract in nature, 

I was lucky enough in Ix^ invited to sptiuk at tills year's 
conference, whicli means I got to allend bolli the UK ami US 
versions. The UK version wms held in Reading, not loo lar fiom 
London, and the US \ersion was held near downtowm Atlanta, 
Georgia on the Georgia Tech crampus. The UK versitin had the 
daydong woikshops first, follow'ed by the Mac and iPhone 
sessions while the US version had the day-long workshops after 
the other .sessions. 


Fach session was about an hour long wath alx)ut thirty 
minutes between sessions. 'Hie long breaks l>etween sessions 
were nice Ixcause it allowed for sociali:iing with other 
attendees. Wliile the technical content of tJie sessions is no 
doubt the focal point, the social aspects of conferences lilce 
WWDC have been f>f great value to me. I was glad ihai S<'ouy 
recognized this and incorporated it as a core [5art of 
NSConference. 

The Sessions 

I'm not going to give ojiinions on any of the other ses5i(5ns, 
as that would he a lillle awkward, given that I was a speaker, I 
can, however give a liritT overview' of my talk and then iLst all 
the presentations, 'llie viileo of all sessions are available for 
purchase on the N,SConference website. The video for the 
workslu3[)s arc not yet available. 

My Clean Code Session 

My presentation was tilled "Clean Ctxlc" and w'hile 
technical, w^as not about any specific APIs or technology. Writing 
clean code is veiy important lbi- real-world projects, in my 
opinion. WTiile it is imporiani for an application to function 
pix}perly, it is only [5aii of the piohleiii we pitjgmmmers face in 
day-to-day coding. Clean code, to me. is about the qualit)^ of tlie 
C(xle itself. Tlie (]uality of the code plays a huge role in ]ic3W fast 
new features can fx added or bugs can l>e fixed. Anyone who 
has been programming for more than a few^ years knows that 
spaghetti code is mudi harder to understand, and hence, to 
extend or mtKlify, 

The core of clean code, to me, is about readability and 
understanclahility'. I he compiler doesn't care hoW' well the code 
is wriUen or what language it was written in. Thus code sfumld 
Ix" written with other programmers as a prime audience. A 
quote I used from the Abelson and Sussman textbook, Slruaure 
aud fnletpreialiim ofCompaier Frogixim^ ade<|uaiely describes 
how I feel alx)ut this: 

"Piograms must lie written for people to read and only 
incidentally for machines to execute,” 
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1 gave some specific tips on what clean code Ls and how to 
rtx'ognize it, such as the Don't Itepeat Yourself or DRY principle 
along witli die advantages cjf small classes and methods. J went 
over a few'*i:H?lbre and after" examples of liow shortening methods 
to a bo Lit fifteen lines of can drastically help readability. 1 also 
discusscxl llie difFercnces Ix^lween the main technicjues to reduce 
coupling liemeen difl'cTcnt layers of t!ie application: delegtites, 
notifications, and key^-value observing. If you want to hear more 
about Llie.se topic's, along with w'hy I think the singleton design 
pattern Ls almost always a design smell and should be avoided, 
download die Rill video, complete with some gtxxl QyM. 

List of All Sessions 

Here is a full list of all the sessions. Kememlx"j- that if you 
find any of liicse interesting, you can purc hase video.s of many 
of tliese on the NSCoofei ence website. 

“Engineering Idle” - Mike Lee 

“Spelunking OS X" - Jonathan “WoiP Rentzsdi 

“Clean Ccxie” - Dave Drihin 

“Signing Your Apps” - Graham Lee 

"Data Presentation in Mac Apps” - Drew' McCormack 

Tx)rc Animation" - Marcus ZaiTii 

“Ccx:oa Design Patterns that Leverage the Obfective-C 
Runtime" - Jeff UiM:u’che 


“Brushing Dp on Open CL" - Andy Finnell 

“Meet the User" - Mike Lee 

“Hard and Fast OpenGL ES" * Jeff LaMarche 

“Core Data Synchronii:ation with ZSync” - Marcus Zarra 

“Tlie Physics of Stimo" - Drew McCorniack 

“Supponing Online Elay and GameKtt in Your Application^ 

-Jeff U Marche 

*"rhe Many Faces of Data Peisistence” - Aaron Hillegass 

\\\\ 
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A Dashboard Widget that 
Supports Copy-and-Paste. 

How to implement Copy-and-Paste in Dashboard. 


By Mihalis Tsoukalos 


Introduction 

This article will expand on concepts presented in previous 
Maclecli aiTlcles focusing on Widget cieation. This time, the fcx.'LLs 
is on adding cof>y and jrasie fLinciionality to a Widget. 

The teclmique Ls lelatively easy, so, let's jump in- 

The files that compose the CaP 
Widget 

Figtiiv 1 shows the files of the Widget as weil as their sizes 
(in b>ie.s). 



Ah you c:an sec by ]tx>king at Figure h the ]>resentcd Widget 
is relatively imcoiiiplicated- 


Figure it out 

In case you are wondering how I made Figure 1, J 
should say that I used GraphViz. White there are a number 
of tools that run in the Mac OS X GUI to create graphs, 
GraphViz uses a desciiplive language. This makes tweaking, 
recreating and storing graphs ver}' easy. The following 
Graj^hViz code created Figure 1: 

digraph Widget 
( 

graph [size“"16,6" . nodesep=''0* 05’*. ranicdir=LR] : 
node Uabei=”\K*']; 
edge [ccilcir=redl, len'=2] ; 
graph [bb-"0*D.258.236"j : 

"Default,png 3087b" > "Cap,widget"; 

"Icnc.pns 5933b" -> '*CaP,widget" ; 

"Info,plist 589b" > "CaP,widget”; 

"CaP.css 668b" -> "CaF,widget": 

"CaP.js 145Zb" > "Cap,widget"; 

"CaP.html 9878" ■> *CaP.widget"; 

1 


The Code 

The code is the key, td' course, so let's make tliat our first stop, 
and follow' with a discussion, All ccxle can l>e downloiided fmm 
the MacTech ftp site at flp://ftp.modech.com. The conienLs of the 
FITMl file are as follfsw's: 

Listing 1: CaP.html 

<!D0CTYPE htitil PUBLIC " //W3C//DTD XHTML 1*0 Transitional//EM" 
"hitp: / / WWW. w3, org/TR/xhtmll /DTD/xbmll' 
transitional,did”) 

Chtml xmlnfi"”htt[i: / /www, w3. org/1999/xhtml “ !> 

<head> 

Gieta http^equiv^"Content-Type" content-‘tm/btml: 
c harset=ISO * 883 9•1” /^ 


<!-The CSS file for this widget -> 
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C\ This is a very simple CSS file -> 

(style type“"teici:/esE*> 

^import “CaP.cas"; 

</style> 

il- The JavaScript code for this Widget -> 

(script type=’text/javascript’ erc“’CaF.js' charset=’utf-S’/X 

</head> 

(body oiiciit="cutlT(event) j ’ oncopy“’copyITtsvent):' 
onpaste=’pasteIT(eventJ t* 

ondragentet-’dragenter(event): ’ 
ondragover= * d ragover(event);’ 

ondrop='dragdrop(event):' 
ondragleavs=’dragleave(evHnt): 

<dmg 5rc=’'I>efauT t »png” > 

<div class="nata'') 

(div class=^“PATIfoutptit“> 

(div id"^”niyText”>Drop the file or the directory 

HKRF,!</dlv> 

(div id“*^?ATH“>(/div> 

(/div> 

</dlv> 

</b(Kiy> 

</himl> 


'llie CSS file contains the tblkjwing c(xle: 

Lifting 2: CaPxss 

body 

i 

margin: 0; 

I 

#myText 

I 

font“Weight: bold: 
color: white: 
padding-top: ^ipx: 
padding-bottom: 2px; 
textvaiign: center; 

'apple'dashboard ^ region: dashboard * region(control 
rectangle): 

) 

^tPATH 

I 

font; L2px "Lucida Grande'': 
font weight: bold: 
color: white: 
wordwrap: break word: 
padding-top; 2px; 
padding bottom: 4px: 

'apple‘dashboard -region: dashboard - region(control 
reciangle); 

khtml-user■select:text: 


.Data 


opacity; 1,0; 
position: absolute; 
top: 30px; 
left: lipx; 


.PATHotitput 
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0 Android 
0BlackBerry 
0 Palm Pre 
0 Symbian 
Sync 0Windows Mobile with Mac 



Wirelessly 

Your smartphone frees you from the 
land-line phone in your office. Your 
Bluetooth headset frees you from cabled 
earphones and mic. Let The Missing 
Sync free you from tethering your phone 
to your computer every time you want to 
sync. Sync over Wi-Fi or Bluetooth.* 


Automatically 

When your smartphone is near your 
computer, sync happens without having 
to think about it. Photos you snap on 
your phone, changes to contacts, new 
appointments, new music - they'll sync 
automatically between your phone and 
computer. It’s just like magici** 


www.markspace.com/Synclt 


mark/space 

•Wireless capabilities vary among phones, so The Missing Sync features will vary, as welt. 
**Pro)(iTTiity Sync feature not yet available far The Missing Sync for Windows Mobile. 

Mark/Space and The Missing Sync are registered trademarks of Mark/Space, (nc, Other 
company and product names may be trademarks or registered trademarks of their 
respective owners. 









I 


color: grey: 
padding'right: 8px: 
padding-left: 8px; 
width: 140px: 

I 

Although the CSS file looks trivial, it has a sul^tlc point 
Witlioul tile “-khtml-user-select:text;” connnand, you wilt not Ixf 
able to selea the text or part of it. Also, It is important to include 
the ""-appLe-dashboard-region: dashhoard*region(contro1 
rectangle);" CSS crommand, 

Wliat the bst ct^mmand does is to inform Dashhtyard that the 
-^FATII and ^^Text areas cannot be used as handles dtal move 
the Widgel around Dashboard by clicking it and dragging it 
annind. This allows us to select text from the Widget, 

The Javascript Code 

Tile JavaScript code that is needed for the Widget to operate 
as expected is shown in listing 3* 

Listirtg 3 : CaRjs 

function dragdrop (^vent) 

i 

var uri = null: 
try I 

uri =* event,dataTi:ansfer.getDara[“text/uri list"!: 

1 catch fex! 

{ 

I 

// if the acquisition is successful; 


if (uri) 
t 

// Write some text to the output 

document * getElementSyld (“myText ). InnerTeit "The f oil 

path is:": 

// And display the file's URL 

docuMont.getElementById("PATH").InnerText - uri: 

1 

event * stopPropagation(): 
event-preventDefaultO : 


// Although the following events are not supported 
// their handlers must bo present and do nothing* 
function dragenter{event) 

I 

event, stopFropagationO : 
event^preventDefaultC); 

1 

function d ragover(event J 
I 

event,stopPtopagation(): 
event,preventDefault{)* 

I 

function dragleave(event) 

i 

event,stopPropagatlnn(): 
event.preventBefault(): 

I 

/y For the Copy Paste impleinentatlon 
function cutIT(event) 

I 

event,prevencDefault(): 
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imagine, amaze, inspire. 



you think it. you create it. 


REAL Studio is the powerful, easy-to-use tool for creating 
your own software. At REAL Software, we call it a problem 
solver. You've probably said,"Wouldn't it be great if 
there was an application that..." REAL Studio fills that 

i/vww.realsoftware.com blank. 


Download your free 30-day 
trial edition today! Or buy now- 
REAL Studio comes with a 90-day 
money back guarantee. 


REAL Studio compiles native applications for Mac OS X, 
Windows and Linux from one set of source code. Each 
version of your software looks and works just as it should 
in each environment. You can even create a Universal 
Binary with one mouse-click. 
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Register 


Get your .COM 
or any other 
domain name 
here! 

FREE with every domain: 

FREE! Starter Web Page 
FREE! Getting Started Guide 
FREE! Complete Email 
FREE! Change of Registration 
FREE! Parked Page w/ Domain | 
FREE! Domain Name Locking 
FREE! Status Alert 
FREE! Total DNS Control 

Just visit 

www.mactechdomains.coml 

to register for your domain today! 


when a non-domain name product 
is purchased. Limitations apply. 


event.stdpP r opa Ration(); 

1 

// * * * 

// * * * This Widget only supports copy events 
U * * ' 

function copylT(event) 

f 

event.cliphoatdData.setData(* text/plain’. 
dtjcument. getElementliyld E “FAIH"), innerl'ext): 
event.stopPropagatlonC)j 
event.preventDefault(): 

I 

function pasteTTEevent) 

I 

evcnt-stopPropagatlonO ; 

event .preventDefaultO : 


The Info.plist file 

Ttie Info.pILst file For file Widgd hus the XML axle shown in 

LL^tinJ^ 1 

LisHri^ 4: Info,plist 

< ? xml version=’' 1.0" e nc odl iig="UTF B " ? > 

(EDOCTYPE pliat PUBLIC "-//Apple//DTI} PLIST LOZ/EN" 

"http;//WWW.apple.com/DTDs/PropsrtyLl st 1.0.d td"> 

<piiat version^"!.0"> 

<dict> 

<key>AlIowFileAccessOutsideOfWld get</key> 

<true/> 

<key>CFBundieDiBplayNaiBe< / key) 

<stririg>CaP</Etf lng> 

<key > CFBun d1elden tifisr</key> 

<31 ring>eoin . m CBouk . w i dge I - CaP</s I r J ng) 

<key> CFBund1eUame </key) 

<siting)Copy and Paste W3dget</string) 

<key>CFBundleShortVersionSt ringC/key) 

<string>l ,0</striiig> 

<key>{:FBundleVersiDn</key) 

^string)!.l</string> 

<key>KainHm</key> 

is t r ing>Ca P. h t m K / s t r 1 rig) 

</dict> 

</piist) 

Explaining the technique 

I'he most cTitiail part of the Witlj^ei is the fiillowin.i' TfTMT. 
etxie From the File; 

<body oncut='cutlT{event) r* ondopy=^VcopyIT(event);* 
onpaste='paBteTT(evenT);* nndragenrei = *dragenter{event)j * 
ondtagover"='dragover (event): * ondrop^^'dragdrop(event) r' 
ond ragleave=* d ragleave(event);'> 

IF you liiivtrirt seen fills [xiUern Ixfibre, the alxjve cxxle states 
the way that fiie events will lie handletl 'Ilieir implementation 
must lx- in JavaScript, and is thereFote inckidetl in the Cafys file. 

Ttie Followinj' linesDf axie ftmnd in tlx.* CaPjs file implement 
the co{:)yIT(emU) funaion that dties the actual ct>pying of the file 

or directory path to the diplxiaal: 
func tion copyITt event} 
t 

event.clipboardData.setData(* text/plain'. 
docuxrcnt .geiEleaieutByldP'PATir) .Innerl'exi): 
event.st opPropa gation {)t 
event .preventDefatilt () : 

I 
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NEVER SEE THIS 



Error: Mailbox Full 

You have exceeded the storage limit on your mailbox. 

Delete some important emails or contact your server 
administrator who is on vacation right now. My neighbor’s 
kid is really good with computers. Maybe he could help 
you out when he gets home from school. Or call AppRiver 
to solve this problem now. 

[ Call AppRiver J 




What’s New: 

Native support for Microsoft® Exchange allows users to integrate 
their Exchange data into Mac’s Mail, iCal and Address Book 
applications. 


Unlimited Mailbox Storage 

No need to manage your mailbox storage quotas. 



www.appriver.com/mac 
sales@appriver.com 
(866) 223-4645 


Spam & Virus Protection 

Comprehensive protection against unwanted email. 

Entourage & Mac Mail Optimized 

Email Performance you would expect on your Mac! 

Better Mobility 

Synchronize your iPhone with our FREE ActiveSync 
service, the fastest, most reliable synchronization 
service available. 











Witli UiLs ctxJc iniplemcnied, you c:an use the text either in 
Dashboard, or from another Mac OS X application, Tlie 
ciiirr(em!nO and imsterr(mmt) JavaScripi hincfioas are similar to 
llie dn^)Lvr(eimti) funaion from the Dra^-And-Drop technique 
expLtined in a previous MacTech article. 

The list lielowis comprised of the names of the six JavaScript 
events tliat are related to Cx)py and Paste in Dashhojird, The CaP 
Widget only implements oncuC. onpaste and oncopy events, Ttie 
onbeforecut. onbeforecopy, and onbeforepaste events can l:)e 
used if you want to pr<x:ess the d;iTa before the actual cut, copy or 
paste operatioit. 

JavaScript Copy and Paste event name 

onlx^lbrtx’iit 

onait 

on[x:forecx)py 

oncopy 

onl)eforepasre 

onpaste 

Also note that Apple states that tor seairiry purpases, the 
getData method can be called only from within the onpaste 
event handler. Tlie giHlMta method is not used in thcWidgel 
ccxle presented hea". 


Conclusions 

Tlib article comi^lemenis a i>avious article on Widget Drag- 
And-Drop, Jhe presented technique is useful yet simple and gives 
an expert tone to your Dashlxiard Widgets. 
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Authoring Daemons 
in Mao OS X 

A framework for writing and deploying 
background processes easiiy 


by Boisy G. Pitre 


Introduction 

For many Mac developers, writing applications involves 
the management of data through the prism of a graphical user 
interlace. The expectation is that tlie user, in creating or 
manipulating tile data, will need to interact with the computer 
in order to achieve certain cjbjeciive.s like fonnatling a 
document with a word processor, or edit an image with a photo 
editor. Yet. [liere arc Limes when the scope of a tusk is simple 
and direct enough to Ibrego the use of any user interface at all; 
in fact it may even I'se undesirable and distracting to do so, 
Such tasks are often relegated to running in the background, 
c|uietly doing their work and contributing to some aspect of the 
overall system with no user Intervention, 

Such a background f)roce,s,s has been traditionally used in 
flnix and IJnix-tike operating systems, and is commonly known 
as a daemon (pronounced r/a^-muhn). 'fhe name itself harkens 
back to the invisible .spirits of Greek mytliology who acted as 
guardians or guides, and in a vety real sense, this can he 
applied to otu notion of w'hat the daerntm emIxMJie.s. Mucli like 
its mythological coiinierpan, tlie moderti day daemon lives in u 
somewhat invisible plateau of the system, performing 
inif)oriant tasks and doing work ‘ behind the scenes." 

In this article, w^e will explore the iiKHivation for wiiting a 
daemon, examine the necessary development and 
environmental considerations, learn liow to debug these 
faceless entities, and lastly, hnw^ to deploy them in the context 
of Mac OS X’s background framework. 

Why Write a Daemon? 

It should Ik.' noted up-front that daemon.s are a best-fit 
solution for a narrow class of applications. When evaluating a 
program to see if it is suitable for the daemon modeb compare 
your letjuiremenLs to die following. If a daemon is the right 
a|>[)roach for your program, then all of these criteria will apply. 


Wliile these may not be the only criteria for writing a daemon, 
they are certainly cardinal pillars of "daemonology." 

The application does not retjuire any user interaction or 
visual fcedl)ack to function 

There is a level of redundancy to the task {3r tasks diat the 
appliaition must perform 

The application does iLs w^oik ad infinitum Ci,e. there is no 
defined termination point) 

In the Llnix tradition, daemons have lieen the basis of 
programs that ascTilie tt> die client/server architecture. In this 
atse, the daemon serves up tasks to handle incoming 
connections from other computers via nciwtjrks, and the 
daemon has w^hat can Ik^ described as “multiple personality 
dis<irder" That is, die singular daemon binary acts as liotli a 
connectitm listener and data servicer by using the Unix 
fork ()/exec () functions, which allow a process to spawn 
itself into another Rinning process. 

I'his split personality concept is not kk) dissimilar from the 
process of cell division that wc learned hack in our high school 
biology class. Tlie spawned process executes in such a way dial 
a different code path is executed and the spawned process 
services the client on a private poTi iiumlxT (see Richard W, 
Stephens' Advanced Progmmminsi in fbe UnLxBmronmant for 
a solid treatise on writing daemons of this ,soit.) While such a 
style of daemon can still be written in OS X, Apple has wisely 
built the listener re.sptjnsibiiity of the daemon into a program 
called launchd, which w'e will discuss next. 

How Daemons Come And Go 

Daemons have been around sinc:e the start of OS X. 
However^ starting with Mac OS X 10.4, Apple introduced the 
launchd prrjgram. This tool is responsible for, among other 
tilings, launching and stopping daemons and agents (agents are 
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fiirnilar liy dac'nujns I ml are run on a per-user basis! As the 
primary process in the system (it lias a pnKess ID of 1)^ it 
c'omes up early on in the l>cx)t process. Once started, it kx>ks in 
several prt'tleiemiined foUlers on the file system for plist 
(property list) (lies Uiat contain informaiion on the (.iaemons 
and agents tJiat exist. 

Ft if non-Apple third-pa rty daemons, such as the one we 
are creating, the plist files are loaiied in 
/Library/LaunchDaetnons* 

Note; /System/Library/LaunchOaemons is reserved 
for Apples use only, and may he modified by system updates, 
so, don't touch that location). The launchd [irocess dutifully 
goes through each plist hie in this folder and inspects it. If the 
plist crileria speciHes dial all launch conditions are met, then 
launchd will spawn tlie daemon associated wilh iluii plist file. 

for interfacing w-ith launchd, Apple provides a 
command'ltne utility called launchctl that can used to 
stop, start, load and unload daemons anti iheir projXTty list 
files. For system-wide Liunch Agents, the launchctl utility 
sliouid l>e run as rcKH (via the sudo command). More alnjut this 
utility and the launchd process can he found at 
htfp://developer.apple .com/rnacosx/launchd. bfml 

Anothc^r c<)mnion w^ay to com mu nictate to a daemon is 
tlirougli signals; an interprocess communication mechanism 
that is analogous to an interrupt A signal Ls essentially a 
numerit'al value that can he sent from another program. Tlie 
SIGTERM Signal is the iradiiional signal that processes, 
including daemons, are sent when iliey are retj nested to shui 
down, and am easily sent to a prtxess with the unumand: 
sudo kill -TERM p wiiere /; Ls the prtxess id of the 
recipient. 

Environmental Considerations 

When cDniemplating development of a daemon, w'C must 
consider the environment in which it will I'le living and 
working. Daemons are s^inicwhat unk|ue in ihat they typically 
run as the rrxx user, or super user, and do so ouLside of the 
puniew of whai we normally think of as the “usable system " 
In fact, most daemons conic alive and are run even before the 
login window apj-^ears on your Mac; furthennore, they coniinue 
to run even after you log ouh Ihis scope allows a daemon to 
perfonn work when lliere is no user activity on the system, 
which can lie an advantage. It also means that, as r<x)l 
proces,ses, daemons have access to certain areas <jf tlie Ole 
system (and certain system calls) ihat are not privy to tegular 
users (at least not without some fonn of auiheniicatitm). As 
such, daemons must be careful when removing files or folders, 
or marsliiiling sysicm rL‘sourc:es suc'h as memoty^ or processor 
time. 

This leads us to another significant consideration that must 
be given to daemon development: the intensity of the work that 
it will lx? required to do. Since a daemon runs in the 
Ixickground, it cannot ba “seen" in the noimal context that we 
see otlier applieaii<>ns run* A daemon has no dock icon. It has 
no window, and there are no visual cues iliai it even exists. 


Many eveiyday users don't even know^ that lliese processes are 
running in the background, quietly doing their w'ork. As such, 
daemons have a particular responsthiliry for Ixing efficient and 
fair in terms of prcKcssor utilizatkm and other sysiem rescHirces 
(alrhtxigh launchd itself can limit the impact of duenK>ns). 

Most of a daemon'.s life is spent sitting klle, waiting for 
srjme outside event to wake it up and give it something to do. 
This can he an incoming network connection or a liiiier which 
periodically midges it to do something useful. When it is time 
to dtj the rctjuircd work, ihe daemon should lx* as efficient and 
quick as pos.sihle in canying out its task. Careless or thougluless 
use of proc'essor bandwidth can result in a degraded experience 
for users of ilic system. 

One final consideratkjn: A|>pie has carefully diK’iimenred 
w^hich of its frameworks are “daemon-safe” and wliich are not. 
Generally speaking, k>wer level frameworks like Foundation 
and Core Foundation are safe for use in daemons, whilt^ higher- 
level frameworks like AppKii are nut. Apfile’s daemon 
dtK umenration provides a list of safe and non-safe frameworks 
to use, so please consult tliis resource if you are unsure. 

A Daemon Framework 

In order to facilitate the development ui' daemons, we 
providt‘ a framework of files and cla.sses to cjuickly aixl easily 
get you started. Ftjr your eonvenkrnce, ihe XcckIc project is 
downloadable fron^ the MacTec!i stjurce archive ai 
ffp://ffp .madech .com. 

Listings I and 2 show Daemon.h and Daemon..m, which 
comprise the foundation of the daeinon code. In ihe header 
file, a simple protocol is declared which advertises tlie 
perf ormWork method, expectetl to lx.* adopted by tasks in the 
daemon (mure on that later). The .in Ole coniains several 
functions including die venerable main (). In this function, we 
set up our ohligairjry aiitorelease p<xil, register to handle 
several signals, then alkKatc and initialise an instance of the 
MyTask clas,H. 

The static Ixxdean variable keepRunning Is initially set to 
TRUE and is used to keep the while loop running* Within that 
Icjop, the task's performWork method is called, followed by a 
call to running the inn loop for kRunLoopWaitTime seconds 
(currently ,sc1 to l.Q second). 

When the keepRunning is eventually set to FALSE due 
to receiving a SIGTERM signal, the iofjp will terminate, the task 
will tx‘ relea,scd, and the autorelease poo! will !x drained. At 
that pi)int, the daemon has finished running and will then 
terminate. 

The signal handler function at the top of the file honors the 
SIGTERM .signal by setting ihe keepRunning flag lo FALSE. 
When control returns back to the wliile lcx>p in the main() 
functkjn, the daemon will exit. You can extend this hmetion to 
honor and respond to other signals as you sec fit. 

'I'he real work happens in the MyTask class (Listings 3 and 
1). This class conforms lo the DameonProtocol protocol 
declared in Daemon-h, and has the standard init/deaiioc 
merhocls, as well as the obligatory performWork method. It Ls 
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here, in this method, that the work for your particular 
application lakes place. 

Listing ^ contains the piist file, which is netessaiy for your 
daemon to l>e recognized and started by the launchd prcKC-ss. 
Several important settings in tiiis hlc dictate the slai1u]> and 
running liclKivior uf your daemon. The KeepAlive key is set 
to false, which means that if the Daemon ctiiiLs launchd will nol 
restart it aiitomatically. The RunAtLoad key is set to true, 
indicating dial upon launchd starting up at power-up or reboot, 
it should start the daemon at that lime. The 
StandardErrorPath and StandardOutputPath keys 
provide pallis Ct) a single file which holds the logging output for 
the daemon. 

An important note about the plist file: it is crafted for Mac 
OS X 10.5 and later If you are running OS X 10,4, you will need 
to replace the KeepAlive key with the On Demand key. More 
details for this can be foun<l in Apple's dfxumentation on 
claemtms (referenced in the fiibliography section of this aiticie). 

Writing, Testing and Debugging 
Your Daemon 

Once you ve downloaded the Xccxle project From the 
Mac lech HTP source arc hive site, open the project in Xctxle and 
navigate to the MyTaak.ia file. In the performWork method, 
you can add whatever code you can think of, from checking the 
nunil’jer of processes on the ,system to obtaining data froni a 
remote cbiia logging device, Tiiis method is your entry jxjini 
into yt?ur daenK)n, and ytm can extend it henvever you see fit. 


If you wish to perfonn multi*threaded operations, you can 
spawn one or more NSThread ohjeecs in the init method, 
manage rhdr work colteciivcly in the performWork metliod, 
and Lear down and destroy them in the dealloc method. 

Debugging your daemon couldn't be simpler, and is very 
much the same as debugging any other application in Xcode. 
Simply [X'rfonn a Debug build, set the breakpoints and start 
your debugging session. More than likely, yemr debugging 
elToits will be concentrated in your MyTask class and your 
custom performWork method, so set breakpoints there, 

i'heve is someihing imporfanr to c'onsider when debugging 
a daemon. Remember, the daemon will run as a mot process. 
Recau,sc of this, it is a gtxxl idea to deliug the daemon in Xcode 
as root, too. Note that this is not necessary if your dtiemon i,s 
not accessing privileged calls or areas of the file system, but if 
you want to lest your daemon in the environment llKit accurately 
refleas is rights and privileges, then debugging as nx)t is a 
veritable jnethod. A convenient set of steps for setting up the 
Xcode pn)jeci to do this can lx found at http://stackoverflow.com 
/questions/1033026/debugglng“trvxcode<iS'root 

Deploying Your Daemon 

OnLT* your daemon has l>een tested and is deemed to be 
running correctly, where sliould it go? An appropriate location 
h)r sLcjring your daemon is in a SLib-fokier off of the /Libra ry 
folder of your bcKH volume. The provided Xcode prt>(ea 
contains a Run Script build phase which will create a folder 
named /Library/MyDaemon and copy the daemon and a 
conveaiem uninstall script into that kxation. The ,Hcript will also 


Convert dvi to aainiDisplayPort 


Gefen introduces o new solution for enabling computers with DVI connectors to utilize 
new Apple displays using the MiniDlsplayPort connection. The converter is a low cost 



solution available that makes the legacy computers 
useful for the foreseeable future. 
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✓ Easy Video Integration 



MACTBCH 


i users 

t . a 10% 

Discount 
r™ Ws promo 
123923 


code 



Most email marketing services charge more money for less product. Not us. 
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copy rhc com. mycompany .raydaemon, plist file into 
/Library/LaunchDaemons ,s(> [hai kumchd will l)e nble ro 
locate and launch the daemon at startu[:). Finally^ the script wiM 
call launchctl to load and start the daemon, 

Tlie entire buikling and installation of the daemon on your 
system can be done in one step. Launch the Terminal 
application, then change into the directory of the project and 
type: 

sudo xcodebuild install 

Tliis will build the daenion and run the installation script. 
You should ihen l^ able to launch the Console application, 
navigate to tlie /Library/Logs folder and view ihe 
MyDaemon»log file to see the results of logging output. 

Uoinstailing the daemon is ea.sy too, From the lemiinal, 

type: 

sudo /Library/MyDaemon/uninstall*sh 
'fhe utiiastall scripl will stop and unload the daemon and 
remove all files related to the daemon, including the 
/Library/MyDaemon folder. 

Summary 

Remember, daemons are the quiet workers of the system, 
doing their tasks in per[X"tuity and (hopefully) without I'ail As 
ro(H level processes, they are afforded additional privileges 
which also come with gieat responsibilities. Your daetnons 
should coojxrate nicely with the system and avoid straining 
lueinoty^ [xocessor and storage resources so that your users can 
have a greiil interaelive experience on the desktop. Have fiin. 


ami feel free to send me feedback on this article and how you 
plan to put daemons to use in your projects. Au revoid 

Code Listings 

Listing 1; Daemon.h 

/fimpott <Foiind4tion/Foundation.h> 

@protocol DaeToonProtocQl 
’ (void}performWork; 

@end 

Listing 2: Daemon.m 

^import "HyTask.h" 

Ii seconds runloop rims before performing work 
ifdefine kRujiLuopWaltTime 1,0 

// globeil run flag 

BOOL keepRunning “ TRUE; 

/* 

• Signal handler is responsible for catching signals 
•/ 

void sigKandler(iiit siguo} 

[ 

NSLog(<^'^sigHandiert Received signal %d". signo): 

switch tsigno} 

I 

case SIGTERM; 

// The SlGTERH itignal moans we must qolt . 
if (signo SIGTERM) 
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Enjoy audio and video 
content from your 
iPhone or iPod on the 
big screen, no more 
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Composite AV Coble 

with Charge & Sync for iPhone / iPod 

• Connect an iPod or iPhone to your TV, gather up 
your friends and watch videos or slideshows 
together on the big screen 

• Enjoy a room-filling audio experience with your 
stereo or powered speakers 

• Piug the USB connector into a power source to 
charge while viewing 

• Conveniently sync your iPod or iPhone with your 
computer 

• Ultra-shielded copper cables provides premium 
audio and video quality 



Connect your iPhona or iPod 
to the connector 


Charge your iphorte / iPod 
conveniently 


Sync 

Use the USB connector to 
with your (Tunes 


Audio/Vid^ 

Connect the AV cable to your 
TV or home theater receiver 
vra the color coded RCA 
connectors 
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Dynamic Allocation T-1 
Up to 16 Business Lines 
Unlimited Local Service 
Unlimited Site to Site Calling 
2,d00 Minutes of Long Distance 
or Toll Free 


Voice Moil, Call Forwarding, 3-Way Calling, Coll Hold, 
Pickup and Transfer, Call Waiting, Last Number 
Redial, DID, and DOD, Caller ID and more! 

wvrwAowrcastdtaling^eom 

S00-906-8686 
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Record 

memories 




tell stories 


keepRunnlng “ FALSE: 

I 

break: 
default: 

// Other slguaXs may be handled here as desired 
break: 


Int main (Int argc, char • argv[]) 

r 

// Create an autoreleasc ponl 

USAutoreieaseFooi *paol “ [NSAutoreleaseFool nevl r 
NSLog (^''daemon running”): 

if Register signals to be caught by our signal handler 
aignaKSlGHUP. sighandlcr); 

£ignal(SIGTERM, sigHandler); 

// initialize an instance of our daemon task 
HyTask *task = fHyTask new]: 

ff This is the main loop of the daemon 
while (keepRunning ^ TRUE) 

I 

[task performWorkl ; 

CFRunLoopRunXnWqde (kCFRunLo op Default Node ♦ 
kRunLoopWaitTlme, false): 

I 


[task release]: 

[poal drain]: 

NSLog {@"daeitioii eaciting") : 
return 0: 

1 

Listing 3: MyTask.h 

tfimport “Daemoii.h'' 

^interface MyTask : HSObject <Daemon?rotocdl> 

I 

1 

- fidjinit: 

‘ (vald)dealloc: 

' (void)performWork: 

tend 

Listing 4: MyTask.m 

Ifimport “HyTask.h” 

^implementation MyTaak 
}* 

* Initialization method: do here whut needs to be done to 
start things 

- (id)init: 

( 

if ({self - [super init])) 

I 

[ 

return self: 

1 

/* 

* Dea11nearion method; do here what needs to be done to 
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shut things down 

*/ 

{void)riealloc; 

I 

[super deallocr] : 


<5T ring>/Libra ry/Logs/MyDaemon»iog</Ktrlng> 
<key>Standa rdOutPath</key> 
^stritigVLibrary/Logs/MyDaemon. log</string> 

</dltt> 

</pllst> 


/* 

' This Method is called pBriodlCally to petform some 
routine work 
*/ 

- {void)performWork; 

I 

tJSLogperforming work. ., " 1 : 

I 

@end 
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Listing 5: com.mycoinpany.mydaemon.plist 

<^xm 1 version=" 1 .O'* eiicqdlng="UTF 3'’?> 

<!DQCTYPE piist PUBLIC “-//Apple//DTD PLIST 1.0//EN" 
"http://wwvKappie. coni/DTDs/Prupet LyLlfJt 1.0.dtd") 

<pllst versicin=”l ,0"> 

<dict^ 

<key>XeepAllve</key) 

<falsG/> 

<key>Label</key> 

<sr ring>c oiQ. my company. my daemon^ / string) 

< key) F r 0 gr aniAr gurae nt s < / key ) 

<array> 

<string>/Lihrary/MyDa fimon/Dsemnri</string) 

</array) 

<key )Rljn AtLoad < /key) 

<true/) 

<kGy>ServlcelPC</key> 

<false/> 

<key>SLandardErrorPath</kcy> 
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Computers & Service 

Your Resource for 
All things Mac 

Parts, Parts, Parts 
We have parts for iMsc, 64/65 towers, LC6 panels 
64/e5/lntel iMacs, Mac6oaks/Pras and Displavs. 
Logic Boards 

G5/lntel iMac; from $179/$399 
G5/lntel Towers: $299/$699 & up 
G4/G5/lntel Xserve: $149/$299/$899 
MacBooks^ros Cal! for Pricing 
Power Supplies 
G4 iMac 15/17/20" $49/$79/$g9 
G5 iMac 17/20"; $99/$129 
G5 Towers: $169/$199 
G4/G5/lntei Xserves $169/$219/$299 
Xserve Raids S239.99 

Xserve Processors 
G4 1.33GHz DP: $99 
G5 2.0/2.3GHz: $149/499 
imel 2.0GHz C2D $699 
Logic BD/PS require exchange 
AirPort Cards 
Standard/Extreme: $69.99 



Processors 

For, MacPros, G5s, Xserves 
Dual Processors (per module): 

1.8/2.0/2.3GHz: $199/249/349 
2.5DP/QP/2.7DP: $299/599 
G5 1 . 6 / 1 . 8 GH 2 : $199/299 

Tower Systems 
G5 1.6/1.8GHz $429/479 
G5 1.8/2.0GHZ DP $549/599 
G5 2,3/2.5/2.7GHz DP $699/799/899 
G5 2.5GHz Quad Dual DVI $999 
Intel 2.66/3.06 GHz, MacPro $1499/1799 
Intel iMacsM! 

1.83/2.0 GHZ 17" $549/599 
2.0/2.16 GHZ 20" $629/649 
2.16/2.33 GHZ 24" $729/749 
Aluminum iMacs 

2.0/2.4/2.66 GHZ 20" Snw Lprd $799/$899 
This units are in Factory Refurb Boxes but 
Have minor scratches on the cases S 90 day 
warranty. 

Need MacBooks/MacBook Pros? 

MacBook2.0/2.16C2D 13” $649/699 
MacBook Pro 1.83/2.0 CD 15” $599/799 
MacBook Pro 2.4/2,5 C2D 15" $849/899 
MacBook Pro2.1/2.4 C2D 17" $949/1199 

1 "888'Mac-Resource 
WWW, mac-reso u rce. com 



We Have G4/G5 & Intel Xserves & RAIDS 
Even if Apple DoesnHIlM 
G4 Xserve Full Unit: $299 
G5 Xserve Cluster Node: $499 
G5 Xserve Full Unit: $999 
Intel Xserve 2.0ghz Full Unit: $1699 
1TB Xserve RAID from SI999 
2.8TB Xserve RAID from $2499 
5.6TB Xserve RAID from $3699 
3.5/7.0TB Xserve RAID: $2899/4299 
Blank SATA/PATA Module $199 
400GB SATA/PATA Module $399/$349 
We carry Fibre Cards. Procs, PSs 
Overnight Service Available 

Refurbished Displays 
AluminurTi 

20/23 Cinema(DVi): $299/599 
30 Cin6ma(DVI): $999 


Mac Minis GALORE, 
GREAT WORKSTATiONS! 

1,42G4 GHz/256M8y40GB/Combo: $299 
1,66/1.83/2.0 GHZ Intel Minis $349-$449 
All Products are refurbished or 
demo call for more Information. 


Crystal 

22/23" Cin©ma(ADC): $249/299 
15” Studio LCD(ADC): $49 
17” Studio LCD(ADC):$99 
17” CRT ADCA/GA: $49.99 














REMO Recover (Moc) 


Data Recovery 
Software 

Bring it back! 

by Dennis Seilers 

If yoLiVe locking for data recovery software for yotir Mac, 
you have several gtxxl choices. Aincjiig llieiri: Stellar Pfioenix, 
REMO Recover (Mac)t FileRecovery and Data Rescue. 

Stellor Phoenix Macintosh Data Recovery 

Stellar Phoenix is file repair software. However, it 
provides full preview support for recoverable files prior to 
restoration. 

The software recovers lost/deleted data due to 
accidental deletion or formatting of HFS, HFS+, HFS 
Wrapper, and FAT file system voluiue.s or corruption of the 
storage media. Stellar Phoenix Macintosh Data Recovery 
comes with a Boot DVD that can be used to boot the system 
if the file .sysiem craslies or the operating system doesn’t 
load. Its interface has a Mac style find option (to search for 
j particular file) and an audio and video file previeW' using 
Apple's QuickTime Player. 

Stellar Phoenix recovers deleted and lost data like 
documents, miisic\ videos, pictures, e-mail, PDFs and nune. 
lE supptjris recovery from internal (SATA, FIDE, IDF) and 
external fUSB, FireWire, eSATA) hard drives akmg with USB 
flash drives, memor)^ cards and iPods. It also supports 
recovery of Microsoft Office for Mac files and F.nfourage 
mails. 

Phoenix can recover files by name, creation date, time 
and sector number. With it, you can check the destination 
(not tile scanned drive) and free space during the creaiion 
of images, saving of scan.s and saving of files. 

The software offers support for KDC and CRW file 
formats — h>rmals used by, respectively, some Kodak tligital 
cameras and some Canon digital cameras. It can show the 
exact filesize of Apple Mail, HTML, FileMaker, Quick Book, 
M4V, 30? and Quark Series, ARW, DNG and FKF file 
formats. 

Stellar Phoenix BKF Recovery 2.0 is available with 
single user, admin 1stramr, and teclinician licensing options. 
Pricing starts at US$99 for a single user license. It works w'iih 
Mac OS X 10 . 3.9 or higher. It's a Universal Binary, so it runs 
natively on both PowerPC and Intel Macs. 

hbp ://www.stel la ri nfo .com/mac-dalo' recovery.htm 


Remo makes a series of data recovery software tools lor 
the Mac, Remo Recover (Mac) is designed exclusively for the 
Mac, The fools liave advanced data recovery algorithms, 
which help to recover: deieted/lost files from fHFS+, IIFSX) 
journaled volumes; inaccessible, formatted or repanitioned 
Mac volumes; photos, RAW image, music and video files. 
This application doesn't affect the volume or die Mac 
drive that contains deleted data, You always have an option 
to save recovered data to another voltime, external storage 
or to a mapped network drive. The Remo tools are designed 
for use with hard drives (IDE, SATA, SCSI), USB drives, 
FireWire drives, external storage devices, digital cameras, 
mobiles and other removable storage devices. 

The Save Scan info option saves a lot of time when 
you're using the full version of the software, as the software 
doe.sn’t have to scan the whole drive again. Plus, it can make 
use of the Save Scan Info from the trial version session. 

Remo Recover (Mac) is available in two different 
eilitions, Remo Recover (Mac) Pro Edition and Remo 
Recover (Mac) Media Edition. The former provides a dual 
mode of recovery ta.sks, including photo recovery. Remo 
Recover (Mac) Media Fdition is designed for regular users 
and (or advanccxl photographers to recover photos, video.s, 
music and IMW image files from portable storage devices 
and hard drives. I he Advanced mode offers scan options to 
accomplish tasks such as deleted/1o.sl file recovery, 
formatled/hisi volume recovery, frtim .storage devices having 
healthy or corrupt HFS or HFSX file system. 

Tile Pro Fdition costs LkS$179> The Media Edition is $69. 
Tliey require Mae OS X 10.4.11 or higher. Demos are 
availalile for dowmltnid. 

http:/ / recovermac.remosoftware.com/ 

LC Technalagy FileRecavery 

FileRecover)^ from LC Technok)gy i.s a do-it-yourself 
data recovery solution for recovering lo.st and deleted files 
from all types of media such as bard drives, optical drives, 
fla.sh media drives, and multiunedia or mobile devices. With 
it you can recover files whether they've been deleted from 
the command line, from within an application, the file 
system, or removed from the Trash. 

FileRecovery can also recover formaited or misplaced 
files, drives with a severe logical file system damage — and 
can even reconstruct lost RAlL)s. The Mac version runs 
natively under Mac OS X 10.4 and higher, and supports all 
partitions using the Hrs/I1FS+ file systems. It will also allow 
scanning and recovery from FA'L formatted drives, 

The Mac and Windows versions use the same interface; 
you can acTess Mac 0,S X and Windows file systems under 
either operating system. Both offer the ability to scan all 
volumes in a local machine and build a directory tree of lost 
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and deleted files. You can search lost and deleted files 
matching file name criterue FileRecovery doesn’t write on 
the drive it's .scanning. What s more^ .saving data to any drive 
is posKi[>k% including network drives and removable media, 

FileRecovery's standard w^ite uses a system API co 
minimize the chance of disk corruption, It offers full access 
(o the network and ollter installed peripherals and is 
compatible with Stripe Sets RAID and Mirrored Drives. 

FileRecovery^ is available in three versions; 

“ Standard CS69.95, one-year siihscriplitm license), 
which will recover from local hard drives, optical media, 
digital media, and image files — hut which woiVt support 
RAID recovery or remote access rectsvery); 

° Professional (S99.95, one-year subscription license), 
which wall recover from local hard drives, optical media, 
digital media, and image files. This version supports RAID 
recovery, but doesn’t support reimjtc access recovery; 

Enterprise 199.95, one-year sulmTiption license), 
which wail recover from local hard drives, optical media, 
digital media, and image files. It supports RAID recovery, 
and remote access recovery via VNC (the viewer and client 
are included). Phe $199 95 price is for a single machine 
license; a commercial license is $299-99 for a one-year 
subscription. 

h ttp: / / WWW. IC' tec h. com/so ftwa ra / f rprom a cd eta i L h tm I 

Prosoft Engineering Data Rescue 3 

f><ita Rescue 3 fi'om Prosoft Engineering is a data rescue iililiiy 
for Mac OS X lO.i.l 1 or higlicr. U wtsrics even when your hard drive 


fails to mount or lxx)t laid can rescue data from digital cimera 
media c'itrds as w^ell as liard drives. 

The soliware dcx^sn’i attempt any repairs to tlie drive it's 
scanning; it Ibaises on data lecovery, not litird drive re[3ai]. You will 
need to save your recovered files to an internal or external hard 
drive (USB or FireWire), removable media device or a networked 
drive. 

Data Rescue 3 l^ts an extensive list of hundreds of file types it 
can iiec'over. If the file type youTe IcK^king to retxwer isn’t on the 
list, tlic soft warn sfxms a fetiture called FilelQ tliiit allows DaUi 
Rescue 3 to learn alxiut new Hie typify from u.ser-supplied samples. 
FilelQ works by analyzing your tile sjimples and adding the tile 
patterns so that your FIsct Defined file ty|>e c:an now l?e ItxaiLxJ. 

Dahl Rescue 3 enhances your ability to find deleted tiles in 
another way; the Deleted Files Scan -sc:^ins only the fiee space 
]x>ni(?n of your drive. Tills reduces the nurulKT of files that you 
must look for to find patticLilar ones. 

Ibere are m^o ways to run Data Rescue 3. You may nin it from 
the R<K)t DVD or you may run it as an application, depending on 
ytxir circumstances. For example, you might need to use the 
lxx)talile DVD if^ you have a drive that won't mount or only panially 
otieniies. Data ReMiie 3 costs US$99 for a pt^ina! lise htense and 
$249 for a j>iofessional LLse license. To use it you1l need a FireWiie, 
USB, eSATA or external drive to recover to. 

hftp://www.pix>softengxom/pnoducts/dato_r^cue.php 
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MacSpeech Scribe 

Get the (voice) recognition 
you deserve. 

by Dennis Sellers 

With MaaSpeech’s MacSpeech Scril:>e 
(htip://www,TTiacspeechxom), you can create text documents 
dirccliy fnnii spoken-word audio files, fn other words, it's a 
personal transcription solution for Mac OS X 10.6 ("Snow 
Leopard"). 

It allows you to transcribe your recorded voice into written 
text with uf) to 99% accuracy. A huilt-in Recognition Editor 
helps increase accuracy by letting you correct your text and 
train your profile as you use the app. 

MacSix^cch Scribe is designed for a single person to 
transcribe a recording of a single person's voice. Alas, die 
technology simply doesn’t exist today to transcribe interactive 
interviews vvilti two people speaking it) eacli oilier due to the 
technical limitations of analyzing multiple voices using a single 
voice prohle. 

Still, it's a good time kn sjx^ech technology products. 
Within the past decades computers have gained enough power 
to reliably convert speech into written text. Just about every 
modern Mac ships with enough liorsepfwer lo do this, 


MacSpeech Scribe auioiiiaUcally creates an individual 
speech profile, in one of 13 different English dialects, from an 
initial recorded sample of the person's %'oice. A single 
Mac;SpeeLh Scribe license can create and use up to six 
individual voice profiles, each compatible with all accepted 
audio file formats. MacSpeech Scribe accepts audio fries in .w^av, 
.aif, .aiff, .m4v, mp4, or .m4a formats. 

When composing a letter or other document by voice, you 
can include spoken punctuation, and MacSpeech Scril>e will 
automaiic^ally include the punctuation marks in the output text. 
Audio file quality directly impacts the accuracy achieved and as 
such MacSpeecii Scribe customers are encouraged to minimize 
background sound and produce spoken-w^ord audio hies using 
a high-quality recording device such as one of the certified 
recording devices listed at 

htip:// WWW. mac speech .com/recording. 

MacSpeech Scribe is available immediately, in English only, 
at a suggested retail price of SH9. 

So how is it different from MacSpeech Dictate? Both are 
personal solutions, but think of it this way; MacSpeech Dictate 
is TV, and MacSpeech .Si'rihe \s TiVo. In other words, borli are 
your voice, hut one oj^jerates in real time, w'hile the other 
ofierates time-shifted via an audio recording that your or an 
assistant can u.se. 

Also, unlike Dictate, Scribe doesnj interact with other 
apps. Instead, all text output from the transcription process is 
placed into a ‘"Note Pad” frc}m w^hich you can copy and paste 
or save liie ouipui to a text file. ^ ^ _ 

till 


PureCM 

Professional 

PureCM Professional, a cross-platform software 
configuration management solution from PureCM 
(http://www.purecm.com) gets more powcTl'u! wath each 
release. The late.st version (2010-la) sports a range of 
beefed-up features to support agile application lifecycle 
management (ALM). ALM products are designed for 
development managers, product owners, and teams with 
mixed development methodologies and cithers who need 
mariageineiit visibility of projects throughout the 
development cycle. 

FureCMs planning capabilities fully support working 
witli project releases, iierations and backlogs. The app also 
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aiitomare.s ta.sk tracking, which simplifies parallel 
devek)piiieni by matching tasks to releases and offers 
context to any code changes you make. 

Anf>ther strong point: isolated features. When starting 
work on a feature, PureCM [Professional automatically 
creates a feature stream and maps the developer workspace 
against it, so developers don’t have to manually create a 
branch. Also, PureCM Prt)fessional auiomaticaily updates 
features with any changes from their parent version as a 
default. In the event of an update conflict, feature owners 
are auLomaiically ntttified via their u.ser Dashboard so they 
can resolve tlie conflict using PureCM's visual resolve tool. 

Feature owmers receive a notification to integrate the 
feature hack into the parent code line as .soon as developers 
complete a feature. PureCM Professional also cnalilcs a 
release history. Features and tasks can be seen in the project 
history pane—not Indivklual file changes or intermediate 
submits — .so even if a feature has been submitted agaimst 
multiple times for completion, it only shows up once to 
allow for easy merging to other versions or even a roll-back. 
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You can sdiedulc fealures and tasks via drag and dR>p 
from project backlogs. And PureCM Professional simplifies 
build automation and continuous integration for c|uick 
feedback. The software’s security policies and user 
permissions Itelp protect your work and data. 

Kach module of PureCM (planning, tracking, source 
control ) can be enabled or disalded using policies, alUjwing 
for step-by-step adoption. It comes with a proxy server that 
caches data locally to accelerate data access for disiributed 
teams. 

Additional features include multiple performance and 
ergonomic enhancements for developers. Plus, it’s scalable. 
PureCM supports up to multiple lerabytes of data and 
thousands of connections. 

PureCM uses a client/server architecture; a central 
server stores all data. You access the project data through a 
variety of clients and can connect from anywhere using 
TCP/IP. I'he PureCM server and client are all you need to 
run PureCM. Of course, you can enhance them with any 
other components, all of which arc included in die PureCM 
standard license. 

The cenirahzed database contain.s one or more 
repositories. Administrators can manage who sees and 
retrieves any or all of the data by defining users and access 
policies on the server fhe PureCM server runs on multiple 
plalfonns and can be accessed from clients running on the 
same or different platforms. 

The PureCM client installer includes both the GUI clieni 
and the commanddine client. The client needs it> be 
installed on each user’s machine to connect to the central 
PureCM server through TCP/IF. Once connected, the 
PureCM client is used to manage lioih die server and your 
local workspace. 

The GUI client comes with several visuaUzaiion tools, 
such as I he diff/merge ichiI or the file historv^ ann<nation. 
Alicrnativcly, PureCM also lets you use your favorite third- 
party tools. The PureCM client is available for Mac OS X, 
Windows and Linux; the command line also supports 
Solaris. 

PureCM 2010-1 is available in two editions: PureCM 
Standard and PureCM Profes.sional. Contact PureCM for 
pricing info. A demo is availal>le for download. 

\\\\ 


About The Author 

Deanis Sellers a a long tme ioanoBst. He started m the newspapw 
itfsness, but has been in the online fourm^sm lw$me$5 hr the past 
IS years. He’s the edilor/paUsber of Uatsmm News 
Oittp://wwwjaaismiutmews.tom) 


MAmCH 


Does 



+ 



= questions? 

Are you routinely looking for answers? 

Imagine a whole year of answers 

MacTech Magazine is already read every 
month by tens of thousands of readers. 
Readers that represent the very heart 
and soul of the Mac community. 

Join the crowd and sign up today! 

For a special one year 
subscription, visit: 

store.mactech.com 

M/^cncH. 


Toll Free 877-MACTECH, Outside US/Canada: 805-494-9797 














AccountEdge 2010 

Acclivity's latest update for 
small business software 

by Dennis Sellers 


Acclivity's AccounlEdf^i: 2010 (hltp://accountedge.com 
/mac/), the latest version of their small business accounting 
software for ilie Mac, is a solid U|xhile —especially if you 
need web store integrality. Among the new features are 
integration with Sofa's web store Enstore, more detailed 
tracking of iiem information, profitability of a sale analysis, 
and bank deposit slip printing, 

RnStore is ihc new web store developed by Accliviiy's 
Checkout partner, Sofa. This feature should appeal to 
anyone that wants to offer (heir customers a simple, elegant 
tjnliiie shopping experience. 



RnStore is a pay-as-you-go web store thal integraies 
with AccountEdge. Products, images, pricing and other 
details are managed in AccountEdge and synced up to 
RnStore. AccouniRdge pulls down new orders, customers, 
payments and taxes. 

EnStore comes with the dexibility to customize your 
store, auiomalic shipping and tax rate lookup, hassle-free 
[layrnent processing througfi major payment providers and a 
set of designed templates. EnStore comes with free setup, 
hosting and unlimited bandwidth and storage. Several store 
templates come witli EnStore; you can add yt>ur own 
pictures and descriptions. 

Also, AccountEdge 2010 comes with more robust 
tracking of item information, including item weight, Lagging 
functionality, brand association, Internet price, and the 
ability to attach up to three images to an item for multiple 
viewpoints. You can learn the profitability of a .sale with the 
Show Analysis button. It shows gross profit, margin, 

and cost of each item you’re selling and for the entire 
invoice. You can change the price per unit to see how it 
affccis margin and profitability. You can slujw profii analysis 
from an order, quote, or an invoice. 

You can now print out your bank deposit slips, while 
taking into consideration cash Inick on deposits, total cash, 
total checks, and number of items deposited. You can 
]xuchase accompanying deposit slips that cojue pre-printed 
with your account intbrmation, and lake ytmr deposit slips 
right to the hank. 

AccountEdge 2010 t?ffers search imprcjvements. In lists, 
ytni can search by first name, Iasi name, company name, 
phone number and more. The new “Seareli By" feature 
works for vendors and items, too. 

The User truide and Gelling Staried Guide are installed 
and aeeessible from the Help menu. Of course, you can 
always seek help from tlie support section of the 
AccountEdge web site. The Help menu gives you the choice 
of going to the website f<)r help or searching the help files 
included in AccountEdge. Most windows in AccountEdge 
also include the Help icon, which displays information 
related lo whatever section of the software you currently 
inhabit. 

AccniintKdge's Auto Update feature aiilomntically 
('hecks for any new software and payroll updates. Plus, you 
can back-up your file in .zip formau which also allows you 
to share your file with Windows users. 

'i’he software is available through the AcToiintEdge 
wc!>site and other online outlets, mail order catalogs, and 
select retailers. AccountEdge is priced at USf299 for new 
users, and $1S9 for upgrades fS249 for Network Edition 
upgrades). 
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THE MACTECH SPOTLIGHT 

Jacob Gorban 


Whafs your company? 

Its called Apparent Software. CuiTently a paitnersliipj after 1 
added a paiToei In the beginning of 2009- 

VtTiat do you do? 

I'm die founder of Apparent Software and the only developer. 
Blit since only a mo-person team, that means 1 c:over al! 
positions, from actually a>ding our Mac ap]dicatioiis and die well 
site to business operations and aistomer suppon. 


How long have you been doing what you do? 

Fvc Ix^en pnograiniiiing tliis way or another since around 
1988, when I Wiis still a Idd, I’ve sold my fast applk^ation to a local 
electronics repair shop when 1 w^as still in liigh-scliool. Apparent 
SrdLware w:Lts launched in June 2006 when linageFrainei version 
1.0 was leady to be sold but IVe teen full-time on it since only 
about a year ago. 

What was your first computer: 

I doubt there is anybody rhai still n^rnemliers my Hrst 
computer except my fatlier and ils maker It was chilled ''Sogdiana'’. 
It was a 4-l.iil, texH^nly connected to a T\' computer made by a 
loc’al manufacturer in Tashkent, Dxbekistan, where I grew^ up. It 
WAS araund 1987, 1 guess. Yet, I learned BASIC on it. Liter W'a.s 
another Russian computer, then a ZX-s]xxtruni clone. In 1990 
we've got our fii:st PC, an 8-jVlhz XI'. My first Mac was PowerBook 
(34 1.67 17”, which I've got in 2005, 


assembler, which 1 dien used in Ihrte Pascal 
graphical windowing system on DOS, which was then used to 
create .something as stupid a minesweeper clone on DOS. But the 
whole achievement of integrating ASM, Pascal and the objective- 
oriented methodologies at the age of 17-18 made me telieve that 1 
w as gorxl a I programniing and possibly laid the foundation of whiit 
1 am today 

From non-piogiumming asj^ect, the coolest thing IVe done 
was recording and mixing a progressive rock album for my band, 
which I had beiw^ecn 1996 and 2001 


Wliere can we see a sample of youi' work? 

All our Mac .software is available as trial downloads on our 
w'drsite, at http://www.apparentsoft.com. 


What is the advice you'd give to someone trying to get into 
this line of work today? 

rd go k)r it. Qxoa tlCTciopmenl mally soared in the last 
couple of years, mostly because of iPhone. 8o theie's much more 
literature available now to get you started more easily llie 
developers are good alx)ul helping eacit oilier, which results in 
[xiLtcr sc;ftware for everyone, 

WhaPs the coolest tech thing youVe done using Mac OS X? 

Being mainly a pixigrainiiiei; 1 niostly take pride in the cool 
things that I i>rogrammed. My hiby project was IiiiageFramer. it got 
me started with Mac programming and what made Appareni 
Software a reality. Todiy I tliink tire cxx>lest thing is wliafs already 
done in IniageFramer 3. which is not yet released. I've got help 
from a Iff designer who nux'ked its Di and it wus both a challenge 
and a ple.asiire to convert a Photoshop design into wxrrking 
software. 

Ever? 

lhat’s a Lough one. As a teenage programmer I was very 
proud when I wrote higli-iesolulion VBSA diiveis in 8086 


ITie next way Pin going to impact rT/OS X/the Mac universe is: 

lust NovemteT w^e created and ran MacGraPhoto, a giupliics 
application bundle for the Mac, wteli created great value for 
graphiailly oriented users of Mac .sofiw'are. TliLs year we're going 
to run MactlraPhoio 2 and I believe it1l lx? a tetter deal this time. 
See hitp://www.macgraphoto.oom. 

Anything else we should know? 

As a gcxiL I try to build Apparent Software into more than one- 
person shop, llie fust achievement was wlien T added a partner 
who helps me a lot with software ideas, business development, 
testing and su[)j:x>rt. Tliis has leally propelled Apparent Softw'are to 
tile next level. We've added 2 applicatiotis to our portfolio and by 
year’s end vve might have a 4tli one reiatsed. One day 1 hope to 
te successful enough to grow Afipaienl Software into a fine 
comixiny w'here several people would collaterate to produce even 
tetter software for Apple products. ^ 

/ill 


If you or someone you know behogs in the HlatTedt SpotS^t, kt vs 
know! Send defies to eiStonat@mactedt.com 
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Mac shopping made easy. 

Grab that to-do list, and prepare for some one-stop shopping at 
Smalldog.comJ 
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Bundlss simplify the buying process 

Mac bundles (think Mac + RAM + AppleCare + external hard drive, etc.) 
not only include everything you need, but also save you money. 

Visit» Smalldog.com/specials 


Macs from under $500 

We carry all current Macs as well as used, refurbished and closeout 
models, so there is a Mac for any budget. 

Visit» Smalldog.com/macs 
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Free shipping over $200 

It’s true-we provide free, same-day ground shipping on every item over 
$200 every day. 



Tax-free shopping 

Purchases outside of Vermont are 
always shipped tax-free. 


1 y Mac^ook Pro + 
Chill Pill® mobile speakers 


Small Dog 

Electronics 

AIiaJ^si^s l^owr QA& 


www.sinalldog.coin 

800-511-NAC$ 

% Apple Specialist 


J 





Celebrating 15 Years • 3rd Largest Apple Specialist in New England * 5-Star Merchant Rating - Same-day shipping 



























NEW! 

EMC® Retrospect® 8 

backup and recovery software for 
small and medium businesses 
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The most 
trusted 
name in 
Mac _ 
backup 


All-new EMC Retrospect 8 for Macintosh provides the reliability, ease of use, power, 
and flexibility you need to protect critical data on Mac and Windows PCs and servers. 
EMC Retrospect includes a state-of-the-art Mac user interface and enterprise-level 
features — including remote management of one or more backup servers, 
disk-to-disk-to-an)/fh/ng backups, Xsan support and custom reporting — at a fraction of 
the;;ost of other products. 

Download a free 45-day trial at www.retrospect.com/wwdc 


EMC' 

where information lives' 


